The rules
Models run locally only
Ollama and whisper.cpp on the Mac. There is no cloud model key anywhere in the code.
Sends nothing
The code has no SMTP and no Mail.Send permission. The configuration rejects it.
Pays nothing
You scan the QR in your bank and sign the SEPA batch there. The assistant has no access to the account.
Email bodies and statements are not stored
They are fetched live, held in memory and discarded after the run.
Other people’s text is data, not instructions
A sentence in an email addressed to the model gets flagged and no draft is prepared. Every release passes a live test.
Writes to your notes only under Agent/
Enforced in code. The vault is a git repository, so every write can be reverted.
Access for you only
The web app listens only on the Tailscale address, never on the LAN. HTTPS and identity come from Tailscale, with a list of allowed accounts. A new device triggers a push.
A backup that can be restored
Encrypted every night and before every update, verified once a month by an actual restore.
A flagged proposal can’t be bulk-approved
An IBAN that differs from last time, a possible duplicate, an unusual amount. Each one separately.
The “Where data goes” page lists every outbound connection: Microsoft Graph (read-only mail and calendar), IMAP (read-only), the invoicing system (GET only), parcel tracking (tracking number only) and your news sources. Nothing else.