Coil.
A local agent harness that shows its work.
Coil routes each turn between a fast router model and a strong worker on your Mac, reviews workspace tools under a per-run policy, shows model residency and a routing receipt on every reply, and keeps conversation memory searchable and deletable. Choose a folder and the Workspace pane maps its Swift symbols right in the app; name a topic and the Wiki pane drafts a page that is written only after you approve it. Before dispatch, a side-effect-free route preview can show the proposed recipient, resident model, bounded context counts, route reason, and a static seven-capability tool list, not predicted calls. Accept it, choose another eligible model already resident on your Mac, or cancel.
Every token is generated on your Mac by default.
Coil runs open-weights language models on Apple silicon. Chat model weights download once, with your consent, from public mirrors, and an on-device embedding model downloads the first time Coil starts. After that, on-device Coil works offline. A cloud model answers only if you switch on Bring Your Own Key; your messages, the conversation and memory context Coil adds to them, and memory upkeep and wiki drafts then go straight from your Mac to the provider you picked, under your own account, and never to Silo Systems.
The right model for each turn.
A small resident router reads every prompt and dispatches it: quick questions to a fast model, hard work to a strong one. Each answer carries its receipt: which model, what tier, what confidence, how fast.
It remembers on a disk you control.
Conversations distill into a local memory store that is searchable, pinnable, inspectable, and deletable. Retrieval, not reload: only what matters re-enters the context window, and you can watch the budget.
Each turn goes to a pinned fast router model or a strong worker, and a quick call the router is unsure about goes to the worker instead. Every reply carries its routing receipt.
A live table of which models are pinned and which are resident, with resident memory and headroom against your Mac's unified-memory budget. Unload any model that is not pinned.
Distilled memories with on-device embeddings. Search, pin, and delete them from the app, and read the trail of what Coil added, merged, or removed. The store stays on your Mac. Memories leave it only if you opt in with your own API key; then your pinned memories, the memories and topic summaries relevant to each turn, and a few similar memories compared when saving new ones go to the provider you configure.
Choose a folder and Coil maps its Swift types, protocols, and functions into a local graph, right in the app, ranked by how connected they are; click a symbol to see its kind and file. Name a topic and the wiki drafts a Markdown page that is written only after you approve it. A local usage ledger shows estimated reply tokens, the tier split, and speed.
Scope Read, Write, Edit, read-only bounded shell, and graph queries to one folder. Choose inspect-only, review-changes, or ask-every-tool for each run; writes and edits show bounded previews protected by full-content hashes, and graph queries do not change workspace files. Cancel a run in progress, and export a trace receipt that keeps hashes and outcomes instead of file text, diffs, or command output.
Review the proposed recipient, resident model, bounded context counts, route reason, and a static list of seven available workspace-tool capabilities, not the tools this turn will run. Set route preview to Always, Ambiguous (only close model choices), or Never; accept, choose another eligible model already resident on your Mac, or cancel. Coil revalidates and reserves the exact route before it changes transcript or memory.