Hacker News Reader

Makes sense. Does your custom harness give you a record of what actually crossed the boundary, or is it mostly trust-based blocking?

My harness is only being used with on prem models, so I don't have any checks in place. If the gguf is somehow calling home, I'm not catching it.