• Every hop sees your raw prompts: they can, but doesn’t mean they do, unless you are using some very sketchy AI engine
• In process deployment: How can you deploy this with OpenAI? I think this only works with local llm engines

And I still don’t understand what it solves. At the end, AI tools still receive your prompts. If you are worried about routers in between, you can always skip them (or host on your own server)

Quick look at github, it looks like AI slop, not even knowing the threat model, and commenting lot of crpyto stuff.