Your prompts stay on the Mac.
ToshLLM runs model inference locally and binds its API to 127.0.0.1 by default. Downloaded model files, chat processing and benchmark history remain on the Mac unless you take an explicit action that sends data elsewhere.
Network features have visible purposes, including model downloads, update checks, optional local-network serving and voluntary benchmark sharing.
Nothing is submitted on view appearance.
An installation that never starts the share flow makes no benchmark-sharing request. The first share creates or loads a device identity, obtains a server challenge, runs the workload and presents a review. Upload begins only after you choose Sign and send benchmark.
The signed payload includes model identity and artifact hashes, hardware description, macOS and app versions, runtime configuration, individual measurements and sanitized benchmark evidence. A pseudonym is optional.
The private key does not leave Keychain.
ToshLLM creates a P-256 signing key on first use. It prefers the Secure Enclave when available and falls back to a software P-256 key stored as a device-only Keychain item. The server receives the public key and fingerprint, never the private key.
Each upload uses a short-lived nonce and signs a domain-separated message containing the challenge, nonce and SHA-256 hash of the reviewed payload. This prevents a copied submission from being silently edited or replayed as a new result.
The next share then starts a fresh, unlinkable installation identity. Earlier public submissions retain their original fingerprint.
Network access is your choice.
Local-network discovery is off by default. If you enable it, ToshLLM listens on every network interface and advertises the API with Bonjour. Enable API-key protection and use this mode only on networks you trust.