Task Mode executes in a local VM on your machine; tool call results never transit our servers. This is an architectural choice, not just a security pitch.
Interaction Task Mode runs inside a local macOS virtual machine (Apple Virtualization.framework) — your AI coworker works right on your own computer. All tool calls — reading and writing files, running scripts — happen on your device, and the results never pass through Lumirain servers.
Session metadata (title, timestamp) syncs to Lumirain servers for multi-device access, but file contents and intermediate tool state always stay local.
What our servers do: route model requests, sync session metadata (title, timestamp), manage account quotas. They never see file contents or intermediate tool state.
This is a design choice, not an accident. Local-first execution lets us implement genuine "undo" — snapshot and rollback — without relying on cloud state.