Security / Clear boundaries
Trust starts with knowing the limits.
Understand the architecture we are building, what it protects and what remains outside its boundary.
01 / The proposed architecture
Your device holds the key.
Your device
Generate keys. Encrypt before storage.
Encrypted storage
Store ciphertext, not readable memory.
Active processing
Decrypt the context needed for reasoning.
Design intent, not a claim of deployed protection. Data used in active sessions may exist in server memory.
02 / What encryption does not remove
Storage is only one boundary.
- Active processing
- Memories must be decrypted for agents to reason over them.
- Model providers
- A model provider can see the context sent to it for processing.
- Compromised credentials
- Access to your passphrase can compromise encrypted data.