Don't trust us. Test us.

We'd rather be checked than believed. Here are four tests, with the result you should expect beside each. A different result is a finding. Please email it to us.

1. Unplug your router, keep talking. Pull your router's power mid-conversation and ask again. It answers the same way, because it never needed the internet.
2. Watch the wire. Over SSH, run tcpdump with the filter below, then have a whole conversation, save a memory and recall it. Expected: silence, apart from content-free time sync, DHCP and mDNS.
3. Feed it a document offline. With the router still unplugged, add a PDF in Docs and ask about it. The answer cites the file and page.
4. Pull its plug. Say 'Remember that my favourite drink is black coffee', wait for the confirmation, then pull the power. It boots, passes its self-test, and still remembers.

The tcpdump filter

tcpdump ships on the unit. Over SSH:

sudo tcpdump -i any -nn 'not ((src net 10.0.0.0/8 or src net 172.16.0.0/12 or src net 192.168.0.0/16 or src net 127.0.0.0/8 or src net fe80::/10 or src net fc00::/7) and (dst net 10.0.0.0/8 or dst net 172.16.0.0/12 or dst net 192.168.0.0/16 or dst net 127.0.0.0/8 or dst net 224.0.0.0/4 or dst host 255.255.255.255 or dst net fe80::/10 or dst net fc00::/7 or dst net ff00::/8))'

What you'll legitimately see at the OS level: NTP time sync to debian.pool.ntp.org (and its DNS lookup), DHCP renewals from your router, and mDNS on your LAN. None of them carry conversation content, and none go to a PHNTM server, because there isn't one.

More checks

• ss -tulpn lists every open port: SSH (22) and the app (8800), reachable from your private network only, plus mDNS. The model server is bound to the device itself.
• ps aux | grep -E 'ollama|llama|uvicorn' shows --offline on the model worker.
• In System, Watch the Wire gives a 60-second live view: your conversation's connections (zero in Private mode unless you've connected Telegram or email) next to every byte the whole machine sent to the internet.

The measured numbers and the full method are on /proof.