Security
Draw the data path first.
Security depends on the model endpoint, hardware, network, tools, account path, and operating process. A privacy slogan cannot describe all of that.
01
Where the model runs
Use a model on the same computer, a server on a private network, or a separately contracted dedicated server. Each is a different processing path.
02
What the hosted service needs
The current public architecture describes account, device, pairing, and connection metadata. Prompts, files, answers, terminal output, screenshots, and keys are not represented as hosted content.
03
Remote access
Account entry is separate from access to a paired computer. Pairing and sensitive remote surfaces use additional authentication and device authorization.