The requirement arrives before the tool does

Nobody writes a ticket that says "buy a USB stick with an AI model on it". What they write

is a requirement, and the tool is whatever happens to satisfy it:

"No external API calls, no telemetry, no code leaves the facility. Tooling must be

removable without residue. No installation on managed endpoints."

Once that sentence is in the request, every cloud-hosted coding assistant is out — not

because it is worse, but because it cannot be made to comply without changing the sentence.

A browser plugin still makes a network call. A self-hosted container still installs

something.…