Lisa OS builds intelligence into the system, running locally, by default. Nothing leaves your machine without your say-so — and every model call, every file it reads, every action it takes is written to a record you can read.
| 09:41:22 | inference.generate | qwen3-0.6b | on this machine | 420 tok |
| 09:41:22 | context.search | ~/notes | on this machine | 3 hits |
| 09:44:07 | remote.generate | claude ↗ | LEAVES · consented | 1,240 tok |
| 09:44:09 | remote.complete | claude | ok | — |
| 09:52:10 | inference.embed | qwen3-0.6b | on this machine | 1,024-dim |
This is real: the Ledger gates every model call before it runs. No entry, no action.
The warmth of a personal assistant that sees, hears, and helps, living on your hardware instead of someone else's data center.
Models run on your machine. The daemons that read your context have no network access at all — privacy enforced by the system, not by policy. Turning it off isn't a setting; there's nothing to turn off.
Nothing offloads to a cloud provider unless you switch it on, per scope. When something would leave your hardware it's marked in a distinct amber, in the interface and in the record — you always know.
Every model call, every piece of context read, every action taken lands in an append-only Ledger you can read in plain English. No black box, no telemetry you can't see.
Chat with the model that runs on your machine, or sign in to a provider you already pay for. Either way, the turn is streamed, and the egress is marked.
We build in the open and we're honest about the state. Real, on real hardware, now.
Try the alpha on real hardware. It's free and open source — your machine, your models, your record.