{"slug": "show-hn-ggg-a-local-first-zero-telemetry-sovereign-proxy-daemon-for-ai-tools", "title": "Show HN: GGG – A local-first, zero-telemetry sovereign proxy daemon for AI tools", "summary": "Garza Global Graviton LLC released v1.4.0 of its GGG sovereign proxy daemon, a local-first, air-gapped AI tool that runs entirely on local hardware with zero cloud telemetry and rejects any Ollama bridge endpoint other than localhost, 127.0.0.1, or [::1]. The v1.4.0 update makes the node's local web hub fully mobile-responsive for screens under 768px, and the packaged Windows binary ggg-daemon_v1.4.5_windows.zip ships self-signed with a SHA256SUMS.txt manifest for hash verification. The daemon's Synthetic Data Center architecture uses cooperating local daemons — Metabolic Heart, Liver, Lungs, and Immune System — over preallocated numpy memoryview buffers to move data without extra copies at local hardware speed.", "body_md": "**Garza Global Graviton LLC** builds sovereign, 100% air-gapped edge\ncomputing systems — hardware and software that run entirely on local\ninfrastructure, with zero mandatory network dependency, zero cloud\ntelemetry, and zero vendor-side visibility into your data.\n\nThe node's local web hub ([`index.html`](https://github.com/JOxKxER/garza-global-graviton/blob/main/index.html)) is now fully\nmobile-responsive as of **v1.4.0**: brand bars, the hardware plaque, the\nphysics benchmark table, and the local Ollama bridge all reflow cleanly on\nphones and tablets (screens under 768px), with buttons, inputs, and panels\nexpanding to full width for comfortable touch interaction, and the physics\nbenchmark table gaining smooth horizontal scrolling instead of a broken\nlayout.\n\nEvery node runs as a **Synthetic Data Center**: a single piece of local,\nair-gapped hardware organized like a living organism, paced and defended by\ncooperating biological daemons that never touch the network:\n\n- **Metabolic Heart** — paces admission and pulses the node's cadence at\nmicrosecond precision.\n- **Liver** — scrubs stale memory in-place with vectorized zeroization,\nnever leaving residue.\n- **Lungs** — inhale and exhale data through a zero-copy ring buffer,\nmoving bytes without ever duplicating them.\n- **Immune System** — a zero-trust scanner that quarantines and\nneutralizes any byte pattern it does not recognize.\n\nBecause every buffer is a single preallocated `memoryview` over a `numpy`\narray, data moves through the organism without a single extra copy, and\nbecause the node is air-gapped, every daemon above runs at local hardware\nspeed, not network speed.\n\n- **Local-only by construction.** The Ollama bridge only accepts`localhost` /`127.0.0.1` /`[::1]` endpoints; remote hosts are rejected\nbefore any request is ever sent, keeping the bridge 100% offline by\nconstruction.\n- **Sovereign data ownership.** Nothing leaves the device unless you\nexplicitly choose to send it — there is no cloud dependency in the\ncritical path.\n\nGrab the latest packaged sovereign app from the GitHub Releases page:\n\n```\nhttps://github.com/JOxKxER/garza-global-graviton/releases/latest\n```\n\nOr click **Download Sovereign App** directly from the top of the local web\nhub ([`index.html`](https://github.com/JOxKxER/garza-global-graviton/blob/main/index.html)).\n\n1. Install and start [Ollama](https://ollama.com) on the same machine (or\nanother host reachable at`localhost` /loopback).\n2. Pull a model, e.g. `ollama pull llama3.2:3b` .\n3. Open `index.html` in a browser and, in the**Local Ollama Bridge** panel, confirm the endpoint (default`http://localhost:11434` ) and model\nname, then click**Check Status** .\n4. Once the badge shows **ONLINE** , use the**Live Local Benchmark** panel\nor the chat row to send prompts — everything runs locally, offline.\n\nThe released `ggg-daemon.exe` is self-signed (no commercial code-signing\ncertificate), so Windows SmartScreen will show **\"Windows protected your\nPC\"** on first launch. This is expected for unsigned local binaries — it is\na reputation warning, not a detection.\n\n**To run it:**\n\n1. On the SmartScreen dialog, click **\"More info\"** .\n2. Click **\"Run anyway\"** — the choice is remembered for that file.\n\n**Verify authenticity before running** (recommended): every release ships a\n`SHA256SUMS.txt` alongside the binary. Compare the hash:\n\n```\nGet-FileHash .\\ggg-daemon_v1.4.5_windows.zip -Algorithm SHA256\n# Then compare against the matching line in SHA256SUMS.txt\n```\n\nIf the hash matches the published manifest, the binary is exactly what this repository built. If it does not match, do not run it.\n\nKeep your editor 100% local by pointing a local-model extension at the same\nOllama daemon (`http://localhost:11434`). Add to your VS Code `settings.json`\n(`Ctrl+Shift+P` → *Preferences: Open User Settings (JSON)*):\n\n```\n{\n  \"continue.server\": {\n    \"port\": 11434\n  },\n  \"continue.models\": [\n    {\n      \"title\": \"GGG Local Qwen\",\n      \"provider\": \"ollama\",\n      \"model\": \"qwen2.5-coder:latest\",\n      \"apiBase\": \"http://localhost:11434\"\n    }\n  ],\n  \"ollama.baseUrl\": \"http://localhost:11434\",\n  \"localai.model.basePath\": \"http://localhost:11434\"\n}\n```\n\n- **Continue.dev** (`Continue.continue` ): the`continue.models` entry selects\nyour local`qwen2.5-coder` as the chat/edit model. See[.continue/config.json](https://github.com/JOxKxER/garza-global-graviton/blob/main/.continue/config.json) for this repo's ready-made\nContinue configuration.\n- **Ollama extensions** (e.g.`Ollama.ollama` ):`ollama.baseUrl` redirects\nall model calls to loopback.\n- **GitHub Copilot** does not support custom/local model providers — use\nContinue or an Ollama extension for fully offline AI assistance.\n\nCryptographic proof, for prospective enterprise buyers, that a sensitive manufacturing/data pipeline ran in a strictly air-gapped, tamper-evident environment -- verifiable entirely offline, without ever seeing the vendor's proprietary pipeline source.\n\nAll of this lives under [`airgap_attestation/`](https://github.com/JOxKxER/garza-global-graviton/blob/main/airgap_attestation).\n\n**Honesty note:** no software system can produce an unconditional\n*mathematical* proof of \"zero network leakage\" from a black box. What this\nplatform delivers is a layered, tamper-evident, independently falsifiable\nevidence chain (hardware-rooted measurement + a cryptographically sealed\nexecution log + dual signatures) where any single point of compromise is\ndetectable. See [`airgap_attestation/CLIENT_ONBOARDING.md`](https://github.com/JOxKxER/garza-global-graviton/blob/main/airgap_attestation/CLIENT_ONBOARDING.md)\nfor what a buyer should actually conclude from a passing/failing result.\n\n```\nCLIENT                          AIR-GAPPED EXECUTION ENCLAVE                CLIENT\n  |  1. commit-reveal blind         |  a. TPM/enclave measured boot            |\n  |     (sha256(sample||salt))      |  b. NIC disabled at hardware level       |\n  |--- POST /v1/submissions ------->|  c. job runs; AuditManifestBuilder       |\n  |<-- {commitment_id, nonce} ------|     records PROCESS_START/END,          |\n  |                                 |     NET_IFACE_SNAPSHOT, syscall counts   |\n  |  2. deliver encrypted sample    |  d. events sealed into a Merkle tree     |\n  |     (out-of-band, key sent      |  e. TPM/enclave QUOTE(nonce||root)       |\n  |      via a SEPARATE channel)    |  f. platform Ed25519 signature over      |\n  |                                 |     (root, quote, validity window)       |\n  |  3. poll GET /v1/submissions/{id}                                          |\n  |  4. GET /v1/submissions/{id}/bundle -> AttestationBundle.json ------------>|\n  |                                                                            |\n  |                                              5. verify_cli.py, fully      |\n  |                                                 offline: Merkle root,      |\n  |                                                 TPM quote, platform sig,   |\n  |                                                 nonce freshness, zero-     |\n  |                                                 network invariant          |\n  |                                                 -> PASS / FAIL            |\n```\n\nFull protocol writeup (data schemas, hashing/signing details, edge cases):\nsee the architecture discussion in project history, or read the code directly\n-- every design decision is documented as a comment at its point of use:\n[`merkle.py`](https://github.com/JOxKxER/garza-global-graviton/blob/main/airgap_attestation/merkle.py), [`schemas.py`](https://github.com/JOxKxER/garza-global-graviton/blob/main/airgap_attestation/schemas.py),\n[`verify_client.py`](https://github.com/JOxKxER/garza-global-graviton/blob/main/airgap_attestation/verify_client.py).\n\n```\nairgap_attestation/\n  merkle.py             Domain-separated Merkle tree (leaf/node hash separation,\n                         no odd-node duplication -- avoids classic forgery bugs)\n  schemas.py             Wire-format dataclasses (SubmissionCommitment, ExecutionEvent,\n                         AuditManifest, TpmQuoteEvidence, AttestationBundle, ...)\n  signing.py              Ed25519 keygen/sign/verify (platform transport-layer identity)\n  attestation.py          HardwareAttestor interface: Tpm2ToolsAttestor (real TPM 2.0,\n                         via tpm2-tools) + ReferenceSoftwareAttestor (dev/test only,\n                         explicitly rejected by production verification)\n  audit_manifest.py       AuditManifestBuilder + NetworkActivityMonitor (pluggable;\n                         LocalReferenceMonitor ships as a portable fallback)\n  proof_bundle.py         Assembles/signs/saves/loads the final AttestationBundle\n  verify_client.py        The entire client-side verifier -- no vendor source needed\n  demo_end_to_end.py       Runnable proof-of-concept: build -> sign -> verify\n  api/\n    store.py              SQLite-backed, single-use nonce/commitment store (atomic\n                         UPDATE ... WHERE guard -- no TOCTOU replay window)\n    nonce_service.py       FastAPI backend: submission intake, status, bundle\n                         download, internal ingest, rate limiting, security headers\n  cli/\n    verify_cli.py          Buyer-facing CLI wrapper around verify_client.py\n  container/\n    Dockerfile             Hardened image: distroless nonroot final stage\n    docker-compose.yml (repo-relative: airgap_attestation/docker-compose.yml)\n                         network_mode: none, read_only, cap_drop ALL, seccomp\n    seccomp-hardened.json  Kernel-level deny-list for network syscalls\n    firecracker_config.json  Stronger alternative: no NIC device exists at all\n    entrypoint.py           In-container job runner\n    deployment_runbook.ps1  Step-by-step build/run/ingest/verify commands\n  CLIENT_ONBOARDING.md     Buyer-facing, step-by-step usage guide\n\ntests/\n  test_airgap_merkle.py, test_airgap_signing.py, test_airgap_pipeline.py,\n  test_airgap_api.py, test_airgap_cli.py     (60 tests, ~84% coverage of the package)\n\nrender.yaml                  Render deployment blueprint for nonce_service:app\n.github/workflows/ci.yml     GitHub Actions: pytest + coverage on push/PR\ninit_repo.ps1                 Release packaging script (see below)\n# From the repository root:\npython -m pip install -r requirements.txt\npython -m pip install pytest-cov   # only needed for local coverage reports\n\n# Run the standalone end-to-end demo (build -> sign -> verify a sample bundle):\npython airgap_attestation\\demo_end_to_end.py\n\n# Run the backend API locally:\n$env:AIRGAP_INTERNAL_INGEST_KEY = \"dev-only-key\"\nuvicorn airgap_attestation.api.nonce_service:app --reload --port 8443\npython -m pytest tests/ --cov=airgap_attestation --cov-report=term-missing\n```\n\nExpect `60 passed`, ~84% coverage. The one large coverage gap\n(`attestation.py`, ~61%) is `Tpm2ToolsAttestor` -- the real-hardware TPM 2.0\ncode path, which is untestable without physical TPM hardware and is not\nmocked out just to inflate the number.\n\nSee [`airgap_attestation/container/`](https://github.com/JOxKxER/garza-global-graviton/blob/main/airgap_attestation/container) and its\n`deployment_runbook.ps1`. Summary of the layered controls (any one being\nmisconfigured must not compromise the others):\n\n| Control | Where | What it guarantees | \n|---|---|---|\n| `network_mode: none` | `docker-compose.yml` | No network namespace peer at all | \n| `network-interfaces: []` | `firecracker_config.json` | No NIC device exists for the guest (hypervisor-level, stronger than netns) | \n| `seccomp-hardened.json` | `docker-compose.yml` | Kernel-level deny of every network syscall, defense in depth under `--network none` | \n| `read_only` +`cap_drop: [ALL]` | `docker-compose.yml` | Immutable rootfs, no elevated capabilities | \n| `distroless nonroot` base image | `Dockerfile` | No shell, no package manager, uid 65532 | \n\n```\n# Render (see render.yaml): create a Blueprint instance pointing at this repo.\n# It provisions the web service + a 1GB persistent disk at /var/data for the\n# SubmissionStore's SQLite file, and generates AIRGAP_INTERNAL_INGEST_KEY for you.\n```\n\nEndpoints exposed by `nonce_service.py` (see\n[`CLIENT_ONBOARDING.md`](https://github.com/JOxKxER/garza-global-graviton/blob/main/airgap_attestation/CLIENT_ONBOARDING.md) for full\nrequest/response examples):\n\n| Method | Path | Caller | \n|---|---|---|\n| `POST` | `/v1/submissions` | Client -- issue a single-use nonce | \n| `GET` | `/v1/submissions/{id}` | Client -- poll status | \n| `GET` | `/v1/submissions/{id}/bundle` | Client -- download the sealed bundle | \n| `POST` | `/v1/internal/submissions/{id}/bundle` | Vendor's air-gapped runner export step only (key-protected) | \n| `GET` | `/healthz` | Load balancer / uptime check | \n\nBuyers should start at\n[`airgap_attestation/CLIENT_ONBOARDING.md`](https://github.com/JOxKxER/garza-global-graviton/blob/main/airgap_attestation/CLIENT_ONBOARDING.md),\nwhich walks through: generating a commit-reveal hash, requesting a nonce,\ndelivering the sample out-of-band, polling for the bundle, and running\n\n```\npython airgap_attestation/cli/verify_cli.py \\\n  --bundle AttestationBundle.json \\\n  --platform-pubkey <pinned vendor key> \\\n  --nonce <the nonce you received> \\\n  --ak-pubkey <pinned vendor Attestation Key>\n```\n\nExit code `0` = passed, `1` = a real check failed (do not proceed with\npurchase), `2` = usage/file error.\n\n[`machine_boost_supervisor.py`](https://github.com/JOxKxER/garza-global-graviton/blob/main/machine_boost_supervisor.py) runs this\nmachine's legitimate maintenance/health daemons on a schedule, with automatic\nrestart for the long-running ones. [`machine_boost_service.py`](https://github.com/JOxKxER/garza-global-graviton/blob/main/machine_boost_service.py)\nwraps it as a native Windows service (via `pywin32`) so it starts at **boot**,\nnot just at user logon.\n\n| Daemon | Mode | Interval | \n|---|---|---|\n| `watchdog_daemon.py` | one-shot, re-run | every 5 minutes | \n| `system_watchdog.py` | one-shot, re-run | every 5 minutes | \n| `snapshot_daemon.py` | one-shot, re-run | every 60 minutes | \n| `mesh_ping_daemon.py` | one-shot, re-run | every 1 minute | \n| `health_monitor.py` | persistent (self-looping) | started once, auto-restarted if it exits | \n\n**Deliberately excluded:** `traffic_daemon.py` and `live_cluster_daemon.py`.\nBoth generate fake synthetic \"client orders\" tagged with real defense\ncontractor names (Lockheed, DARPA, Raytheon, General Dynamics, Northrop)\nagainst a local API with a hardcoded key -- not a maintenance function, and\nnot something that should run unattended at every machine startup fabricating\nusage data attributed to real companies.\n\n**Environment hardening applied to every managed child process:**\n\n| Variable | Why it's required | \n|---|---|\n| `PYTHONIOENCODING=utf-8` | Several daemons print emoji; without this they crash with `UnicodeEncodeError` the moment they run without a real console (exactly the situation under a Windows service). | \n| `PYTHONUTF8=1` | Belt-and-suspenders UTF-8 mode for the child interpreter. | \n| `PYTHONUNBUFFERED=1` | Piped stdout is fully block-buffered by default (not line-buffered); without this, `health_monitor.py` 's output can sit invisible in the child's buffer indefinitely instead of streaming to the log. | \n\nThe supervisor's own `subprocess.run`/` Popen` calls also pass\n`encoding=\"utf-8\"` explicitly -- `text=True` alone still decodes captured\noutput using the OS locale (cp1252 on this machine) regardless of what the\nchild's own encoding is set to, which silently reintroduces the same crash\none layer up if omitted.\n\nAll output is logged to `logs/machine_boost_supervisor.log` (git-ignored;\nit's runtime state, not source).\n\n```\npip install -r requirements.txt   # installs pywin32 among the rest\npython machine_boost_service.py install\npython machine_boost_service.py start\n```\n\nCheck on it later:\n\n```\nGet-Service GGGMachineBoost\nGet-Content logs\\machine_boost_supervisor.log -Tail 50 -Wait\n```\n\nStop/remove it:\n\n```\npython machine_boost_service.py stop\npython machine_boost_service.py remove\n```\n\n[`ci.yml`](https://github.com/JOxKxER/garza-global-graviton/blob/main/.github/workflows/ci.yml) runs on every push/PR to `main`: Python\n3.11, installs `requirements.txt`, runs the full test suite with coverage,\nand uploads the coverage report (`coverage.xml` + HTML) as a build artifact.\n\n```\n.\\init_repo.ps1                 # stage, commit, tag v1.0.0-release (no push)\n.\\init_repo.ps1 -Push           # also push the branch and tag to origin\n```\n\nThis repository already has git history and an `origin` remote; the script\ndetects that and only adds a new commit + tag for this milestone -- it does\nnot reinitialize or rewrite existing history.", "url": "https://wpnews.pro/news/show-hn-ggg-a-local-first-zero-telemetry-sovereign-proxy-daemon-for-ai-tools", "canonical_source": "https://github.com/JOxKxER/garza-global-graviton", "published_at": "2026-09-19 03:09:11+00:00", "updated_at": "2026-09-19 03:24:50.290205+00:00", "lang": "en", "topics": ["ai-tools", "ai-infrastructure", "ai-products", "developer-tools"], "entities": ["Garza Global Graviton LLC", "GGG sovereign proxy daemon", "Ollama", "llama3.2:3b", "qwen2.5-coder", "Visual Studio Code", "Continue", "GitHub"], "alternates": {"html": "https://wpnews.pro/news/show-hn-ggg-a-local-first-zero-telemetry-sovereign-proxy-daemon-for-ai-tools", "markdown": "https://wpnews.pro/news/show-hn-ggg-a-local-first-zero-telemetry-sovereign-proxy-daemon-for-ai-tools.md", "text": "https://wpnews.pro/news/show-hn-ggg-a-local-first-zero-telemetry-sovereign-proxy-daemon-for-ai-tools.txt", "jsonld": "https://wpnews.pro/news/show-hn-ggg-a-local-first-zero-telemetry-sovereign-proxy-daemon-for-ai-tools.jsonld"}}