We'd rather be checked than believed. Here are four tests, with the result you should expect beside each. A different result is a finding. Please email it to us.
- Unplug your router, keep talking. Pull your router's power mid-conversation and ask again. It answers the same way, because it never needed the internet.
- Watch the wire. Over SSH, run tcpdump with the filter below, then have a whole conversation, save a memory and recall it. Expected: silence, apart from content-free time sync, DHCP and mDNS.
- Feed it a document offline. With the router still unplugged, add a PDF in Docs and ask about it. The answer cites the file and page.
- Pull its plug. Say 'Remember that my favourite drink is black coffee', wait for the confirmation, then pull the power. It boots, passes its self-test, and still remembers.
The tcpdump filter
tcpdump ships on the unit. Over SSH:
sudo tcpdump -i any -nn 'not (net 192.168.0.0/16 or net 10.0.0.0/8 or net 172.16.0.0/12 or net 127.0.0.0/8 or net 224.0.0.0/4 or net fe80::/10 or net fc00::/7 or net ff00::/8 or host 255.255.255.255)'
What you'll legitimately see at the OS level: NTP time sync to debian.pool.ntp.org (and its DNS lookup), DHCP renewals from your router, and mDNS on your LAN. None of them carry conversation content, and none go to a PHNTM server, because there isn't one.
More checks
ss -tulpn lists every open port: SSH (22) and the app (8800), reachable from your private network only, plus mDNS. The model server is bound to the device itself.ps aux | grep -E 'ollama|llama|uvicorn' shows --offline on the model worker.- In System, Watch the Wire gives a 60-second live view: your conversation's connections (zero in Private mode) next to every byte the whole machine sent.
The measured numbers and the full method are on /proof.
Still stuck?
Email [email protected] with your serial (it's on the back of the business card). You get the person who built your unit, not a queue.