Sentinel

Your AI. Your phone. Nobody else's data.

Every other AI app ships your words to a server. Sentinel doesn't. The language model runs on your phone. The speech recogniser runs on your phone. The voice that answers you back, the image generator that paints what you describe, the vision pipeline that reads your photos - all on your phone. Every chat, every voice clip, every generated image, every page of every PDF you've asked about - sealed inside a post-quantum encrypted Sanctum that nobody but you can open. Not us. Not Google. Not the next breach.

Open the app on the train. Ask a real local LLM what to write to your lawyer. Snap a photo of a foreign menu and have it described back. Drop a 200-page PDF into your vault and ask one question. Speak it - Whisper transcribes - and hear the answer back in your language. Nothing on a server. Nothing in a log. Nothing in your 'AI history' page.

LOCAL LANGUAGE MODELS
• Curated GGUF catalogue (SmolLM, Qwen, Llama, Phi, Gemma, Mistral, DeepSeek, Hermes, Starcoder…) auto-gated by your device's RAM
• HuggingFace browser to add any GGUF beyond the curated set
• Per-family prompt templates wired correctly (LLaVA / Qwen-VL)
• Optional Ollama / OpenRouter cloud fallback - opt-in only

VOICE, VISION & IMAGE GENERATION
• whisper.cpp speech-to-text (Tiny → Small)
• Piper ONNX text-to-speech, 17+ voices across 15+ languages; espeak-ng bundled - no Android TTS, no Google Speech
• CLIP + LLaVA + Qwen2-VL vision for image-aware chat
• Tesseract OCR for photos, scanned PDFs, screenshots
• Stable Diffusion in your pocket: 384×384 in 30-60 s on mid-range hardware. Bring your own safetensors checkpoint

RAG IN YOUR VAULT + SKILLS
• Drop PDFs, text, markdown, or images into your Sanctum and ask the LLM about them — retrieval is fully local
• Eight built-in Skills (Summarise, Translate, Code Review, ELI5, JSON, Brainstorm, Rewrite, Cite) + author your own; Skills roam with your Sanctum

POST-QUANTUM SANCTUM
• Hybrid PQC KEM - X25519 + ML-KEM-768 (NIST FIPS 203), Argon2id, BLAKE3, AES-256-GCM-SIV at rest
• Fingerprint unlock + TOTP 2FA, configurable auto-lock, multiple Sanctums per device
• Optional Ollama-compatible local API on 127.0.0.1:11434 for opencode, goose, and your tools

NO ACCOUNTS. NO TELEMETRY. NO PLAY SERVICES.
Runs cleanly on GrapheneOS, CalyxOS, LineageOS, /e/OS. The only network traffic is whatever model download or cloud fallback you explicitly trigger.

PLUGIN ECOSYSTEM — COMING
Sentinel is a platform. Paid plugins unlock individually - same Sanctum, same models, same on-device guarantee:
• Praeco - content studio
• Curriculum - career tactician
• Mnemos - memory forge
• Faber - pocket coder
• Notarius - voice notary
• Advocatus - contract reader
• Custos - password vault
• Effigies - memecoin & NFT forge
• Gens - family-tree archive with historical cross-reference
• Velocitas - vehicle log (ICE + EV)
• Aurum - collector's ledger
• Annales - PQC journal
• Tabularius - receipts
• Diarium - private calendar
• Coquina - kitchen
• Pharos - read-later
• Cura - medication log
All bundled in one signed APK. You pay only for the plugins you want.

Sigillum Sentinel - your AI, sealed against everything.