Your prompts. Your files. Your keys.
Every prompt you send to a cloud LLM is a file leaving your machine. For public work that's fine. For a client's codebase, an unreleased contract, a journalist's source, an M&A doc — fine becomes not-fine instantly. vinOS is agentic AI with the default flipped: local first, yours by construction.
What you're actually opting into with cloud-only AI.
Every prompt is a data export.
The moment you paste a file, a repo excerpt, an internal spec — it's on someone else's server. Their retention policy, their subpoena risk, their next breach.
Zero-trust doesn't extend to your dev laptop.
Your SSO is locked down. Your VPN is enforced. Your AI IDE integration sends codebase context to a third party in the clear. The perimeter has a hole.
Compliance keeps saying no.
HIPAA, GDPR, SOX, ITAR, client MSAs — every one has clauses about where regulated data lives. "The AI tool sends it to us-east-1" is not an answer that survives audit.
What vinOS flips.
Local by default.
Ollama is the primary path. Super+A opens a local LLM. Every prompt, every file, every code excerpt processed on your GPU. Nothing leaves the machine unless you route it out.
Frontier is opt-in and visible.
Claude Code is available under Super+Shift+A. You know when you're calling it. Your API key lives in your shell, not stored anywhere else. Reserve the API for the calls that need frontier reasoning.
Zero telemetry.
vinOS never phones home. No usage stats, no crash reports, no update pings you didn't invoke. What's installed is what's installed; what runs is what runs. Verify with
ss -ptn— nothing you didn't start.Every decision is readable code.
MIT licensed. 88
vinos-*scripts you cancat. No hidden binaries, no compiled agents, no proprietary layer. Audit the source in an afternoon.

ollama · local · 3 models · claude · opt-in only · outbound: claude only ✓ · telemetry: none.Take the agents. Keep the sovereignty.
Freelance consultants working across client codebases. Journalists protecting sources. Legal teams reviewing contracts. Researchers with regulated data. Anyone whose "AI stack" needs to survive the next data-privacy conversation.