An assistant that lives on your phone sees everything you do. The question is who else gets to see it. Keeping the model and its memory on the device changes the answer.
When the agent runs next to your data, it can act without sending your inbox or calendar anywhere. It also stays useful with no signal.
make the agent accountable to one person: its owner. Every action it takes can be signed and checked later.
The interface should get quieter, not louder. Fewer screens, one conversation, and the right card at the right moment.
A secure enclave is a small, sealed part of the processor. Keys are created inside it and can be used there, but never read out.
When an agent signs an action with one of those keys, anyone can check that it came from your device, and only your device.
That makes the phone the root of trust, not a server you have to believe.
{{fd.summary}}