A reference protocol for a safe division of work:
- a cloud coordinator creates a narrow, expiring, signed plan;
- a local worker opens an outbound connection through an application-supplied transport;
- the worker verifies the signature, digest, time window, nonce, size, and task allowlist;
- a local model or local tool executes the task;
- the worker returns a digest-linked result envelope.
No transport, account session, API key, remote shell, or arbitrary URL handler is bundled. The default library makes no network request and opens no listening port. Applications can supply HTTPS, WebSocket, MQTT, or another authorized transport without changing the signed protocol.
This design does not make metered cloud inference free. Local execution consumes local resources; any cloud planning or generation still follows that provider's authentication, billing, quotas, and terms.
License: MIT.