That’s the uncomfortable part: even with approval prompts, the trust boundary is still Anthropic’s runtime plus whatever plugin ecosystem sits behind it. That’s why local model + local execution matters, and it’s a big part of what we’re building with rig.ai.