Real routing. Simulated models.
An AI operations control plane decides whether each request runs on a local model or a cloud model, and enforces privacy, cost, quality and review rules around it. On this public site, every decision is real; only the model calls are simulated.
What runs for real
Every request takes the same path. One step is simulated here.
- 01RealClassifySensitivity scanner and task profile
- 02RealPolicyEvery model checked, fail-closed
- 03RealScore and routePrivacy, cost, task fit, reasoning, latency
- 04RealBudget GuardWorst case reserved before any call
- 05SimulatedModel executionRecorded replays where one exists
- 06RealEvaluationOn recorded text; simulated text is skipped
- 07RealReview and traceApproval queue and full request trace
Real on this site
- Task classification and the sensitivity scanner (personal data, credentials, markings)
- Governance policy evaluation for every model, including fail-closed blocking
- Routing scores across privacy, cost, task fit, reasoning and latency
- Budget Guard, worst-case cost reservation and fallback chains
- Human-review rules, the approval queue and the request trace
Simulated on this site
- Model inference: no model is called from this site
- Local outputs: replays of real Gemma 4 12B and Qwen 3.5 9B runs recorded on the developer's Mac where one exists for the exact task; otherwise an explicit notice
- Cloud outputs: illustrative text, always labeled simulated, never evaluated or recommended
- Latency and cost of cloud models: the router's estimates at list price
A local install also
- Discovers installed Ollama models and runs them on the device, at $0 in API fees
- Optionally calls Claude through the Anthropic API, behind two explicit switches and a worst-case budget reservation
- Measures real latency and throughput and feeds them back into routing
- Keeps history, approvals and the spend ledger in SQLite
Why the public site can't
It deliberately cannot reach the developer's local Ollama runtime: there is no tunnel, proxy or exposed port to any private machine.
No provider credentials are used in Portfolio Mode. Paid API execution is disabled server-side, so no visitor can generate paid usage. Requests that ask for live execution are rejected with a 403, not quietly downgraded.
Anything you type is processed in memory by deterministic code and returned only to you; it is never added to the shared demo history.