Verify it yourself.

This site makes claims — private, local, honest. Claims are cheap. This page is the numbers behind them and the standard commands that let you check every one of them on your own unit, with no cooperation from us. Nothing below is estimated or projected; where a number can change between builds, your unit's in-box notes carry its own.

The machine

Measured performance

Method noted per number. The Pi is allowed to be a Pi — we publish what it does, not what marketing wishes it did.

Reliability, counted

Every boot runs a six-check self-test (ledger, brain, disk, thermal, services and speaker) and appends one line to an on-device tally — reliability here is a running count, not an adjective.

The wire

The central claim: in Private mode, nothing you say leaves the box. Check it with standard tools:

1. See every open port: ss -tulpn — expect sshd, the app on 8800, mDNS, and inference bound to 127.0.0.1 only. Scan it from another machine; it should agree.
2. Watch the wire while you talk to it: run tcpdump filtered to non-LAN traffic, then have a whole conversation. Expected result: silence. (What you will see, documented, content-free: NTP, DHCP, mDNS.)
3. The kill test: unplug your router entirely. Chat still works. Memory still works. Reboot with no internet — it comes back and keeps working.
4. Inspect the workers: ps aux shows the inference process with --offline and loopback bindings. The model files sit on disk in the standard Ollama layout.

The exact tcpdump filter (hides only traffic that stays inside your network, so anything leaving the house shows):

sudo tcpdump -i any -nn 'not ((src net 10.0.0.0/8 or src net 172.16.0.0/12 or src net 192.168.0.0/16 or src net 127.0.0.0/8 or src net fe80::/10 or src net fc00::/7) and (dst net 10.0.0.0/8 or dst net 172.16.0.0/12 or dst net 192.168.0.0/16 or dst net 127.0.0.0/8 or dst net 224.0.0.0/4 or dst host 255.255.255.255 or dst net fe80::/10 or dst net fc00::/7 or dst net ff00::/8))'

What passing looks like during a full conversation — the only lines you should ever see, none carrying content, none to any PHNTM server (there are none):

IP x.x.x.x.123 > pool.ntp.org.123: NTPv4 — time sync (Debian default)
IP 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP — your router's lease renewal
IP x.x.x.x.5353 > 224.0.0.251.5353: mDNS — LAN name announcement
…and then silence, for as long as you care to watch.

Updates, without dependence

Shipped units have no update channel — no repo remote, no phone-home, nothing polls. Updates are owner-initiated: you place a build on the device yourself (its SHA-256 is published with each release), a documented local procedure applies it, runs the boot self-test, and rolls itself back automatically if that self-test fails. The unit never checks for updates on its own — there is no update server to check — and it never needs our servers to keep working; there are no PHNTM servers to need.

Numbers on this page were measured on the working prototype in August 2026 and are refreshed at each release. Your unit ships with its own burn-in results. If you measure something different, email the builder — that's a bug report, and it's welcome: [email protected].