Daniel KliewerThe book
A monumental archive of dark metal plates receding into blackness, lit by a single warm amber light

Local-first AI systems

Systems that run on your hardware, and can prove what they did.

I build local-first AI systems: agent runtimes that separate what a model proposes from what the machine is permitted to do, knowledge compilers that keep every claim traceable to its evidence, and creative tooling that verifies what it actually rendered instead of trusting an exit code.

12
Systems in the index
195
Published articles
8
Concepts they share
24
Chapters in the book

01 — The argument

Three constraints that recur in everything here.

The systems differ in language, domain and maturity. They keep solving the same three problems, which is why they belong together.

The execution boundary

This shape appears in the agent stack, the video studio and the specification engine. It is a diagram rather than generated artwork because the labels have to be correct — a model cannot be relied on to spell “allowlist”, and a diagram that mislabels the architecture is worse than none.

The execution boundaryA model emits a proposal. A deterministic boundary checks it against an allowlist, path restrictions and a schema, then either refuses it or passes it to an executor. Both outcomes are written to an audit record. The model never calls the executor directly.MODELproposesno authorityINTENTBOUNDARYallowlistpath rulesschemadeterministicrefusedlogged, not silently droppedPERMITTEDEXECUTORrunsone operationRECORDaudit trail+ hashesThe model never calls the executor directly.

02 — Selected systems

Four entries, and the problem each was built to answer.

Maturity labels describe the code. Dates are the last commit, read from the repository — not a promise about the roadmap.

04 — Research log

Tested in public first.

The open notebook. Every technique in the systems was built, measured and argued about here before it earned a place in one.

Oct 25, 2026Ganymede, the Archive of the Gods: A Film Pipeline an Agent Can ReplicateA complete, reproducible account of building a 3:08 mythological science-fiction film with local models and Rust creative tools: twenty environments from Qwen-Image-2.1-Turbo, six reusable effect templates, a 2.5D compositing rig, a cloned voice, a four-bed synthesised score, and a twenty-check artifact report. Includes the full repository layout, every data contract between stages, and the seven audio attempts it took to stop a broken export stage from clipping the mix.Oct 25, 2026Hermes Local Video Studio: A Reproducible Video Production Capability for AgentsHow six separate investigations became one reproducible local video-production capability: Qwen-Image-2.1-Turbo for stills, the ArtCraft Rust suite for compositing and editing, and a validation layer that records every step as verified or merely requested. Includes the working code, the four silent failures it caught, and the exact commands to reproduce it.Oct 25, 2026The Dissolve That Wasn't Applied: Six Rust Tools, Four Silent Failures, and a 2:57 FilmA complete, verified log of building a 2:57 short film with six Rust reimplementations of the Adobe suite: Qwen-Image-2.1-Turbo for fifteen stills, a zero-shot cloned voice, a synthesised score, and a headless edit. The real story is four failures that each reported success — a transition API with two id namespaces, a caption track that exports an SRT but never renders, a grade that silently no-ops without an explicit selection, and two shots frozen for ten seconds. Every command was run. Every number came off real output.Sep 3, 2026PageRank SEO: Why Modern Search Optimization Is an Information Architecture ProblemWhy modern SEO is increasingly an information-architecture and systems-engineering problem, and how the open-source pagerank-seo SDK turns the idea into a working, evidence-traceable auditor for Python scripts, CI pipelines, and autonomous agents.Jan 3, 2026The American Phoenix: How One Man's Digital Resurrection Rewrites the Rules of SurvivalFrom mescaline baby to AI pioneer, this is the untold story of how trauma, technology, and unbreakable will forged a new path for human resilience in the digital age.Dec 4, 2025Critical Next.js RCE: CVE-2025-66478 Security GuideCritical Next.js RCE (CVE-2025-66478) exposes Server Actions to attacks. Learn how AI phishing and framework vulnerabilities converge—secure your App Router now.Nov 15, 2025Building and Evaluating a Local-First Research Assistant with GraphRAG and vero-evalComplete technical guide to building a production-ready research assistant using GraphRAG, Neo4j knowledge graphs, Ollama local LLMs, and vero-eval evaluation framework for rigorous AI system testing.Jul 6, 2025Demystifying Large Language Models: A Data Pipeline Insider's Perspective on LLM Architecture and LimitationsAn in-depth exploration of large language models from the perspective of a decade-long career in AI data pipelines, separating hype from technical reality.

05 — Book

Computational Sovereignty: Building Local-First AI Systems

Run serious AI on hardware you own — full applications, no cloud, no exfiltration. It is the long-form version of the argument the systems make: that owning your execution environment is a precondition for trusting what it produces. 214 pages, 24 chapters, $88.

06 — The engineer

Ten years of search relevance, twenty of painting, and the same question in both.

I spent 2010 to 2020 at Amazon in Austin measuring whether information actually satisfied the query — relevance as a measurable property rather than a vibe. Before that and throughout, I painted: figurative oil work, then two-hour films made by wiring televisions through modulators to refurbished computers, one of which screened at Austin Film Society in 2012.

The AI work is the same question one level up. A search result either deserves to be surfaced or it does not. A generated claim either survives its evidence or it does not. Both are answered by inspection, not by confidence — which is why these projects publish their tests, their measurements and their failures.

Self-directed computer science through MIT OpenCourseWare, 2017 to 2021 — the curriculum, not the credential.

Find the code

github.com/kliewerdaniel ↗

221 public repositories since 2014

What I work on

  • Local inference and owned execution environments
  • Deterministic governance around model output
  • Knowledge compilation, provenance and claim graphs
  • Evaluation that measures instead of asserting