private · on-device · yours

millfolio

A private vault for the documents that are yours. Index your PDFs, Word docs, CSVs, and notes and ask open-ended questions — answered locally, your data never leaving the machine. A frontier model writes the code that runs on your data; it never sees the data itself.

How it works

Frontier model — cloud untrusted · sees only aliases (file_0, col_2) Your Mac — your data never leaves it browser / iOS the millfolio app App server · :10000 UI · REST · chat WS launchd Generated Mojo program runs in a sandbox — loopback network only Inference server · :8000 chat + embeddings · on-device GPU launchd Your vault PDF · Word · CSV · notes + on-device LanceDB index HTTPS/WS writes the program (aliases only) orchestrate · approval gate loopback HTTP ask_local · search reads files
One constraint shapes everything: the frontier-written program runs as a separate, sandboxed process that can reach the network only over loopback — so inference is a local service it talks to over HTTP, not an in-process call. That's why there are two servers (and why they stay two: the app restarts without reloading the ~7 GB model). Both run under launchd.