The Jellyfish Assistant, on your own hardware.

It runs on a machine you control, with local models, and reaches a cloud provider only where you've allowed it. No operator, no shared tenancy, no telemetry.

Memory, credentials and logs are encrypted at rest under a key sealed to your machine. A recovery key, printed once, brings it back on new hardware.

Keep personal work on local models and bring keys for frontier providers where you want them. You decide which model handles what, and what each one may see.

Every boundary has a public contract that says exactly what an add-on must declare and may assume. Layer on first-party add-ons, third-party ones, or your own — a tool, a memory module, a page, a model provider — and modify anything for your own system.