interactive-story/planning/DECISIONS/004-local-only-production.md

ADR 004 — Local-Only Production Default

Status: Accepted

Decision

The production application will be designed to operate without Internet access.

Context

The project requires control over story data, imported material, prompts, and model outputs, with no unintended disclosure to outside services.

Alternatives Considered

• hybrid local/cloud,
• optional cloud providers enabled by default,
• local-only default with future explicitly enabled extensions.

Reason

Local-only operation best matches the privacy and control requirements.

Consequences

The production application should avoid:

• telemetry,
• analytics,
• cloud inference,
• remote vector stores,
• automatic web retrieval,
• runtime CDN dependencies,
• remote fonts/assets.

All inherited network behavior from a fork must be inventoried during Phase 0.