Sovereign Hearth:
Zero-Trust, Local-First AI Infrastructure
A comprehensive architectural blueprint for eliminating cloud data custody. Proving that private, high-velocity artificial intelligence can execute 100% within the physical perimeter of your home.
Executive Summary: The Sovereignty Thesis
Modern artificial intelligence architectures are built upon a structural vulnerability: centralized data custody. Transmitting raw prompts, private documents, personal telemetry, and contextual memories to hyperscaler datacenters introduces irreversible systemic risks:
Unbounded Data-at-Rest Exposure
User context sits unencrypted or symmetrically accessible in multi-tenant cloud storage, subject to infrastructure compromises, insider threats, and administrative subpoenas.
Model Training Leakage
Context fragments and conversational logs inevitably enter downstream fine-tuning and evaluation pipelines without user verification.
Continuous Ambient Telemetry
Cloud gateways log IP addresses, token velocities, active hours, and query metadata, constructing deep behavioral fingerprints of users.
Supply Chain Fragility
A single policy change, billing dispute, or API deprecation can permanently sever an individual or organization from their institutional knowledge.
∀ d ∈ CloudData, d ∈ {Ciphertext, Metadata} ∧ d ∉ Plaintext
Data never sits readable on a cloud service. The cloud carries only ciphertext envelopes or minimal network routing metadata.
Core Architecture: Two Doors, One Rule
To enable real-world utility without compromising data isolation, PAI divides all network interactions into two strictly decoupled interfaces:
You and Your Devices Only
Governed exclusively by Tailscale/Headscale WireGuard overlay networking. Every authorized node (Dell, Mac Pro, MacBook, mobile client) receives the tag tag:pai-box.
- Zero public IPv4/IPv6 inbound listening ports
- Web UI binds strictly to 127.0.0.1 (tailscale serve)
- UPnP and NAT-PMP disabled at kernel netfilter level
Cloud Services Push In
One outbound-initiated Cloudflare Tunnel (cloudflared) behind Cloudflare Access Service Token validation and cryptographic signature verification.
- Asymmetric X25519 sealing on Cloudflare Worker edge
- Edge Worker possesses ONLY public key (K_pub)
- Local ingest daemon is a dumb write-only sink (chmod 700)
Asymmetric Ingress & Mail Processing
Conventional assistants read your email and calendar by synchronizing raw credentials to cloud databases. PAI implements Edge-Sealed Ephemeral Transformation:
- Ephemeral Ingestion: Inbound email arrives at a Cloudflare Email Worker over TLS. The worker holds only the PAI Public Key ($K_{pub}$).
- ChaCha20-Poly1305 Sealing: The worker generates an ephemeral symmetric key, encrypts the message payload, and wraps the key via X25519 against $K_{pub}$.
- Tunnel Ingress (Door 2): The ciphertext envelope is pushed through the tunnel to the local PAI box.
- Hardware Decryption: Only the local box holds the private key ($K_{priv}$), sealed in hardware TPM2/LUKS storage.
- Local LLM Draft & Human Approval: The local model drafts a reply inside an isolated sandbox. Nothing sends without your explicit manual Confirmation.
Verified Open-Source Technology Stack
PAI rejects closed-source proprietary stacks. Every layer is built upon audited, industry-standard open-source primitives:
| Subsystem | Open-Source Component | License | Role in PAI |
|---|---|---|---|
| Local Inference | llama.cpp | MIT | C++ tensor engine with unified memory zero-copy inference |
| Vector & Memory | SQLite 3 + sqlite-vec | Apache-2.0 | In-process zero-dependency semantic embeddings & graph storage |
| Sovereign Mesh | Tailscale / Headscale | BSD-3-Clause | WireGuard peer-to-peer mTLS overlay network |
| Payload Sealing | age (FiloSottile) | BSD-3-Clause | X25519 + ChaCha20-Poly1305 asymmetric stream encryption |
| Process Sandbox | Bubblewrap & Landlock | LGPL-2.0+ | Unprivileged Linux kernel user namespace execution |
| Atomic Host OS | bootc (Red Hat / OCI) | Apache-2.0 | Container-native immutable host image with dual-slot A/B rollback |
| Encrypted Backup | restic | BSD-2-Clause | Nightly cryptographically authenticated deduplicated backups |
Ready to own your intelligence?
Lock in your priority founder allocation with 60% launch discount on hardware workstations, or flash PAI OS on your own x86-64 mini PC.