Iam Local Rag

Intent NEXUS — Local-first BYOK Document Intelligence

**Local-first BYOK document intelligence with verifiable citations, privacy receipts, provider portability, and policy-bounded cloud acceleration.**

**Identity:** one product, three names — product **Intent NEXUS** (NEXUS under the Intent Solutions house brand) · local directory `local-rag-agent` · GitHub remote [`jeremylongshore/iam-local-rag`](https://github.com/jeremylongshore/iam-local-rag).

[](https://ko-fi.com/U5S225PTME)

What it is

NEXUS turns your documents into a queryable knowledge base you control. It runs **local-first** (Ollama + Chroma, no keys, nothing leaves the machine) and lets you **bring your own** cloud model (Anthropic, OpenAI, Vertex, or any OpenAI-compatible endpoint) **only when you choose to** — with every outbound call passing through one policy gate.

Honest scope: NEXUS *can* run fully local (air-gapped), but it also ships cloud provider adapters and defaults to `hybrid`. It is **designed for privacy and supports local-only operation** — it is not a compliance certification and makes no HIPAA/GDPR/SOC 2 claim.

The trust layer (the point)

Not "a shinier chatbot" — the moat is verifiable trust, enforced in code and measured on every run:

• One policy gate on every outbound call (LLM and embeddings). local mode makes zero external calls, fail-closed. hybrid forces local embeddings and sends only redacted, capped snippets. Secrets in your corpus are blocked before any cloud call.
• Verifiable citations + refusal. Real relevance scores; the pipeline refuses in code ("insufficient evidence") rather than guessing.
• Privacy receipt per query — provider/model, chars/tokens out, chunk ids + hashes, redactions, local-vs-cloud, policy pass/fail.
• Tamper-evident audit ledger — hash-chained; nexus audit verify proves it.
• Untrusted-data handling — retrieved text is d