Self-hosted on your machines, against your models, inside your network. The model, the work, and the trail stay within your walls — by construction, not by policy.
The agent, the model it calls, your data, and the audit trail all run on your infrastructure. There is no outbound path for any of it.
By construction. Privacy isn’t a setting that could be misconfigured — there is simply nowhere for the data to go.
Why there is no egress pathInvariant The model, the work, and the trail never leave your network. There is no egress path to misconfigure.
Go deeper — the perimeter
How the four surfaces stay inside your network, and why there is no egress path to disable in the first place.