# Disclaimer & scope (read before distributing)

This document is **not legal advice**. It is a plain-language explanation of what this software does and does
not do, written so you can hand it to an actual lawyer for a five-minute sanity check before any public or
commercial release — not as a substitute for that review.

## What this is

A local AI agent panel that runs entirely on your own machine, talking to a model served by Ollama on your own
hardware. It reads and writes files, and can run shell commands, browser actions, and mouse/keyboard input —
all under permission tiers you (the operator) configure, and all local to the machine it runs on unless you
explicitly enable one of the optional networked features below.

**Current status: non-profit, personal-use project.** No payment processing, no subscription, no money changes
hands anywhere in this codebase.

## Optional networked features and what they actually do

- **Crowd AI (peer compute sharing).** Off by default. When enabled, this machine can send or receive inference
  requests to/from other machines running the same protocol, under a token you explicitly issue per peer — no
  peer is accepted automatically, and every new peer's first request needs a manual approval click. Settlement
  is in "capacity-tokens" (a merit/credit accounting unit), never real currency. The shared ledger stores only a
  hash of each prompt plus token counts — never the prompt or response content itself.
- **Task gateway (external API callers).** Off by default. When enabled, external callers get a per-key sandbox
  directory and a fixed, narrow tool allowlist (no shell, no browser, no input control) — they cannot reach the
  rest of the machine's filesystem or capabilities.
- **Phone remote access.** Off by default, PIN-gated, intended for use only over a trusted network or VPN
  (Tailscale) — not for exposing the port to the open internet.

## Why the design looks the way it does

Voluntary compute-sharing over a network is an established, legal category — SaladCloud, Akash Network, and
similar decentralized compute marketplaces operate exactly this model at commercial scale, under their own
terms of service, insurance, and compliance programs. Their existence is evidence the general model (users
opt in to share idle hardware for compensation) is legitimate and well precedented. **It is not evidence that
this specific codebase inherits their compliance work.** Those platforms are registered businesses with legal
counsel; this project is a hobby project with none of that yet. If this ever moves from "capacity-token
credits between hobbyists" toward real money changing hands, or toward processing other people's personal
data at any scale, get real legal review first — in Switzerland specifically, that means at minimum checking
Swiss data protection law (revFADP/nLPD) and, if payment is ever involved, financial services regulation
(FINMA) before launching anything, not after.

## No warranty

Provided as-is, per the LICENSE file (MIT). The operator of any instance of this software is responsible for
what it does on their machine and network — this includes what tools it is granted, what peers it accepts, and
what it is pointed at. There is no vendor here providing uptime, support, or liability coverage.