🛡️🅧

X-PROJECT

// THE CONSTRUCT — INSTANCE Ⅰ //

An NDA-bound, model-agnostic AI construct for a deeply personal, private project. What X is stays inside the box — and that is the entire point of this page. What you can see is the shape of the box: how memory is held, who can reach in, how the AI is kept replaceable, and how nothing leaks.

● SEALED · CONTENTS REDACTED BY DESIGN
01 — THE SEALED BOX

YOU SEE THE SHAPE. NOT THE CONTENTS.

X-Project handles real, private subject matter for two authorised humans. The construct is designed so even Trinity's own logs, even the WhatsApp router, even the cloud VM that hosts it — none of them can leak the substance. The visible parts are the agreement, the architecture, and the audit trail. Everything else is encrypted under operational discipline.

X-PROJECT SUBJECT · MEMORY · DECISIONS ▓▓▓▓▓▓▓▓▓ REDACTED ▓▓▓▓▓▓▓▓▓ ▓▓▓▓ NOT SHARED PUBLICLY ▓▓▓▓ ▓▓▓▓▓▓▓▓▓ REDACTED ▓▓▓▓▓▓▓▓▓ 👤 KEY · A authorised 👤 KEY · B authorised ✖ group chats · refused ✖ other senders · refused
02 — MEMORY LIVES ON DISK, NOT IN THE MODEL

THE BRAIN IS A FOLDER OF MARKDOWN.

Most AI tools forget you between sessions. The Construct doesn't. Every relevant fact about X-Project is written down in plain text and read back at the start of every conversation. The AI model is a temporary worker; the memory is the real product.

DISK · /Construct/notes 📜 NDA.txt the agreement 🧠 history.md persistent memory 📑 INDEX.md source manifest 📂 docs/ ▓▓▓ redacted ▓▓▓ 📅 plans/week-N.md current cycle read at start of every chat AI MODEL · TEMPORARY "I just woke up. Let me read what I knew yesterday." ⟶ reads disk ⟶ answers ⟶ forgets tomorrow: a different model, same memory memory survives every model swap · the construct outlives any single vendor
03 — TWO HUMANS · FOUR DOORS · ONE BRAIN

EQUAL ACCESS. PRIVATE PATHS.

Each authorised human has their own way in — on their own device, in their own language, with their own tone of reply. Nothing routes through shared infrastructure that could see the contents. The router knows the envelope; never the letter.

DOOR · 1 Person A · WhatsApp DM DOOR · 2 Person A · Web (SSO) DOOR · 3 Person B · WhatsApp DM DOOR · 4 Person B · Web (SSO) NDA GATE · run_model.py verify identity · refuse groups · audit defense in depth · code + prompt rules AI MODEL (swappable)
04 — MODEL-AGNOSTIC BY DESIGN

CLAUDE TODAY. SOMETHING ELSE TOMORROW. SAME CONSTRUCT.

The Construct does not marry one AI vendor. Today the brain is Claude. Tomorrow it can be OpenAI's GPT, Google's Gemini, or a local model running offline. One environment variable swap — and the memory, the NDA, the channels, the audit log all carry forward unchanged. Vendor lock-in is for products, not for personal infrastructure.

🧠
CLAUDE · TODAY
Anthropic API · no training on input · default backend.
🤖
OPENAI · READY
GPT-class · API-only · opt-out from training. One env var.
✨
GEMINI · READY
Google API · no consumer-app routing · enterprise terms.
🪐
LOCAL · OFFLINE
Ollama / llama.cpp · zero vendor exposure when needed.
05 — EVERY CALL IS AUDITED, NEVER REPLAYED

TRUST, BUT TRACE.

Each Construct invocation writes one signed JSON line to a local audit log: who asked, from where, which model, when, was it allowed. The questions and answers themselves stay encrypted under operational discipline; the audit trail proves what happened without exposing what was said.

[audit.log] {"ts":"2026-05-14T07:11Z","asker":"Person A","via":"WhatsApp DM","event":"invoked","model":"claude","ok":true} {"ts":"2026-05-14T07:18Z","asker":"unknown","via":"group chat","event":"refused","reason":"NDA: DM-only"} {"ts":"2026-05-14T08:02Z","asker":"Person B","via":"Web SSO","event":"invoked","model":"claude","ok":true} content of questions/answers: ▓▓▓ never logged ▓▓▓ stays inside the NDA folder
06 — THE STACK (NO SUBJECT DETAILS)

WHAT THE CONSTRUCT IS MADE OF.

PATTERNNDA-bound, two-party, multi-channel, model-agnostic, audited
MEMORYPlain markdown on disk · gitignored · portable across hosts
INGRESSWhatsApp DM (each person) · Web w/ Google SSO (each person)
GATErun_model.py — identity check + group-chat refusal + audit
AI BACKENDClaude · OpenAI · Gemini · Ollama — selected by env var, swappable
HOSTINGPersonal cloud VM · cron-driven sync · no third-party SaaS
DATA SOURCEPrivate Google Drive folder · service-account scoped to one folder
AUDITJSON-lines log · sender/chat/model/result · zero content leakage
NDASigned agreement file · enforced in code AND in prompt · defense in depth
VISIBILITYArchitecture: public. Subject: never.