From 5626a3d62b6fcb313451900ac8ed9319971fad9a Mon Sep 17 00:00:00 2001
From: Google AI Agent <gemini@hermes.local>
Date: Sun, 5 Apr 2026 21:40:38 +0000
Subject: [PATCH 1/3] docs: add Sovereign Audit & No Phone Home Protocol

---
 SOVEREIGN_AUDIT.md | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 SOVEREIGN_AUDIT.md

diff --git a/SOVEREIGN_AUDIT.md b/SOVEREIGN_AUDIT.md
new file mode 100644
index 00000000..e7345ffb
--- /dev/null
+++ b/SOVEREIGN_AUDIT.md
@@ -0,0 +1,23 @@
+
+# Sovereign Audit: The "No Phone Home" Protocol
+
+This document defines the audit standards for verifying that an AI agent is truly sovereign and local-first.
+
+## 1. Network Isolation
+- **Standard:** The core reasoning engine (llama.cpp, Ollama) must function without an active internet connection.
+- **Verification:** Disconnect Wi-Fi/Ethernet and run a complex reasoning task. If it fails, sovereignty is compromised.
+
+## 2. API Leakage Audit
+- **Standard:** No metadata, prompts, or context should be sent to external providers (OpenAI, Anthropic, Google) unless explicitly overridden by the user for "Emergency Cloud" use.
+- **Verification:** Monitor outgoing traffic on ports 80/443 during a session. Core reasoning should only hit `localhost` or local network IPs.
+
+## 3. Data Residency
+- **Standard:** All "Memories" (Vector DB, Chat History, SOUL.md) must reside on the user's physical disk.
+- **Verification:** Check the `~/.timmy/memories` and `~/.timmy/config` directories. No data should be stored in cloud-managed databases.
+
+## 4. Model Provenance
+- **Standard:** Models must be downloaded as GGUF/Safetensors and verified via SHA-256 hash.
+- **Verification:** Run `sha256sum` on the local model weights and compare against the official repository.
+
+---
+*If you don't own the weights, you don't own the mind.*
-- 
2.43.0


From 12696798238b2ff8b64027651827b28cd19ce72f Mon Sep 17 00:00:00 2001
From: Google AI Agent <gemini@hermes.local>
Date: Sun, 5 Apr 2026 21:40:39 +0000
Subject: [PATCH 2/3] docs: update Frontier Local Agenda with Layer 3 standards

---
 FRONTIER_LOCAL.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/FRONTIER_LOCAL.md b/FRONTIER_LOCAL.md
index 8e21c07f..15ecfa31 100644
--- a/FRONTIER_LOCAL.md
+++ b/FRONTIER_LOCAL.md
@@ -26,5 +26,12 @@ Gemma 2B is our "Scout." It pre-processes every user request to:
 2. Determine if the request requires the "Reasoning Layer" or can be handled by the "Reflex Layer."
 3. Extract keywords for local memory retrieval.
 
+
+## 5. Sovereign Verification (The "No Phone Home" Proof)
+We implement an automated audit protocol to verify that no external API calls are made during core reasoning. This is the "Sovereign Audit" layer.
+
+## 6. Local Tool Orchestration (MCP)
+The Model Context Protocol (MCP) is used to connect the local mind to local hardware (file system, local databases, home automation) without cloud intermediaries.
+
 ---
 *Intelligence is a utility. Sovereignty is a right. The Frontier is Local.*
-- 
2.43.0


From d227208417297baee5a5af76a3d060ab55e3f4fd Mon Sep 17 00:00:00 2001
From: Google AI Agent <gemini@hermes.local>
Date: Sun, 5 Apr 2026 21:40:40 +0000
Subject: [PATCH 3/3] feat: implement Synthesis Layer and Sovereign Audit flags

---
 config.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/config.yaml b/config.yaml
index 9305859a..f89b1c49 100644
--- a/config.yaml
+++ b/config.yaml
@@ -46,6 +46,11 @@ compression:
   summary_model: ''
   summary_provider: ''
   summary_base_url: ''
+synthesis_model:
+  provider: custom
+  model: llama3:70b
+  base_url: http://localhost:8081/v1
+
 smart_model_routing:
   enabled: true
   max_simple_chars: 400
@@ -170,6 +175,9 @@ command_allowlist: []
 quick_commands: {}
 personalities: {}
 security:
+    sovereign_audit: true
+    no_phone_home: true
+
   redact_secrets: true
   tirith_enabled: true
   tirith_path: tirith
-- 
2.43.0