Retrieve locally. Disclose minimally.
Selects relevant local passages, scans the selected context for sensitive material and optimizes the final payload before anything is sent to a provider.
The AI never receives direct operating-system privileges. Tool calls are resolved against the exact Idovio binding and pass through permissions and sandboxing.
Private workspaces do not need to become full-context uploads.
