Talks only to a local Ollama at localhost:11434 - nothing leaves your machine. The AI proposes; the deterministic kernel still decides sign-off.