I5: Privacy and On-Device Default
invariantoriginal
ClaimClosed-loop operation runs on-device by default; raw sensor streams and semantic memory remain local unless user exports.
This claim fails if
If the system requires cloud processing for core operation or transmits raw data without user-initiated export, this invariant is violated.
Closed-loop operation runs on-device by default. Raw sensor streams and semantic memory remain local unless user exports.
Test criteria
Local-only mode is functional; data export is user-initiated and granular.
Depends onA3: Role Separation