Local-first is a strong privacy boundary, but “no account/no KYC” is not itself proof that a request stayed private. I’d make the proxy emit a per-request receipt: provider/model, quote and authorization, request/result hashes, spend/refund/timeout, and whether bytes crossed the local boundary...