Running an agent on bare-metal k3s does not keep all business data local if its prompts go to a cloud model. OpenShell can constrain access; data residency still depends on the inference endpoint and what the application sends.

on Bluesky