[mentalgear]

Really nice project, congrats & great work! Quick notes:

- as an end user, some primary concerns re apps using the file system:

   - who will be able to read it? does the app share data?
     - I'm not thinking about a privacy policy, but a hard block that would not allow any internet access for the binary/app. Would rlama still work correctly ?

   - is the app able to modify/delete files?
      - it should be ensured that there is no "full file system" access, ie just read permission

- code note: surprised that .ts (typescript) is not listed

- really crisp website: did you code it from scratch or is it template-based?

[ImPostingOnHN]

I put ollama on a docker container, at first with no internet access, and then by using opensnitch to keep an eye on this. You can probably put rlama on another container and do the same thing.

Note that there are threat profiles for which this is not enough security.