# ADR 004 — Local-Only Production Default

**Status:** Accepted

## Decision

The production application will be designed to operate without Internet access.

## Context

The project requires control over story data, imported material, prompts, and model outputs, with no unintended disclosure to outside services.

## Alternatives Considered

- hybrid local/cloud,
- optional cloud providers enabled by default,
- local-only default with future explicitly enabled extensions.

## Reason

Local-only operation best matches the privacy and control requirements.

## Consequences

The production application should avoid:

- telemetry,
- analytics,
- cloud inference,
- remote vector stores,
- automatic web retrieval,
- runtime CDN dependencies,
- remote fonts/assets.

All inherited network behavior from a fork must be inventoried during Phase 0.