Privacy & Security Boundary 1.4.0

Local ranking is default OFF, local-only, minimized, and subordinate to deterministic safety stages.

Hard rules

Allowed	Forbidden
Local scoring of existing candidate IDs	Cloud AI requests
Semantic Snapshot and aggregate signals	Raw DOM, innerText dumps, form contents
Safe count/status events	Model telemetry or training uploads
Policy fallback	Bypassing validator or guardrails

Separate opt-in

Adapt itself is opt-in. AI adds a second explicit ai.enabled === true gate; the default provider remains unavailable.

Safe events

velin-adapt-ai-start|rank|error|stop carries provider status, candidate counts, reasons, and timestamps only.

Audit

Audit stores semantic intent and before/after state, never model prompts containing page content because page content is not part of the snapshot contract.

Future boundary

A cloud ranker would require a new ADR, consent, redaction rules, and legal/regional review. It is not a hidden adapter option in 1.4.0.