-
-
Notifications
You must be signed in to change notification settings - Fork 176
Description
In your videos, you strongly emphasize a security-first approach and repeatedly state that the TELOS file should never be uploaded anywhere. However, even running Claude Code locally on a machine that has access to the TELOS file, and it is ending up on Antropics server, this is 100% exposing private information, from the file.
I would like to ask whether you could provide more concrete and technical guidance on how to safely run private LLMs in conjunction with a TELOS file. Specifically, I am interested in architectures or workflows where the model can extract only high-level or constrained information from the TELOS file, without ever transferring the file itself or its raw contents to any external server. The goal is to ensure that the TELOS file remains strictly local and that no unintended data leakage occurs during inference or processing.
Questions:
- What is the safest recommended architecture for running a private LLM that interacts with a TELOS file while guaranteeing the file never leaves the local machine?
- How can one technically restrict or sandbox Claude Code so it only receives abstracted or limited information rather than direct access to the full TELOS file?
- What common mistakes or overlooked attack vectors could still lead to TELOS data exposure, even when everything is supposedly running “locally”?