Trust model

Local by default. Explicit by design.

AIPI keeps the core workflow on your machine. Cloud capabilities are optional and designed around consent, redaction, deletion, and auditability.

Local execution

Your network, your secrets

Requests run locally by default. Use editor or OS secret storage, keep private keys out of collections, and test localhost or private endpoints naturally.

Agent safety

Evidence before correction

Redact credentials, require approval for mutations, block unsafe automatic retries, and show the evidence behind each diagnosis.

Cloud boundary

Consent before upload

Team history and CI services must receive redacted artifacts only after explicit opt-in, with retention controls and permanent deletion.