Short and non-negotiable. These four rules are the filter we apply before any agent design, dependency, or deployment decision ships.
Core Rules
1. Local-first by default
No agent should require cloud connectivity to function.
2. Keys never leave the machine
Private keys, API tokens, and memory stay on the user's hardware.
3. Minimal attack surface
Every dependency is a liability. We ruthlessly prune.
4. Human in the loop for high-stakes actions
Agents propose. Humans decide.
This is not negotiable.