OSS + ELC EU 2026

AI agents are moving from chat interfaces into workflows that read files, call tools, modify state, and coordinate multiple services. In cloud-hosted designs, this often creates a fragile trust boundary: private data leaves the device, tools are authorized through broad API keys, and the user has limited visibility into what the agent can do. This talk presents an open-source, local-first architecture for permissioned AI agents that can operate offline on Linux edge or personal infrastructure. We will break down the architecture into model serving, retrieval, tool invocation, capability scoping, identity, audit logs, sandboxing, human approval, and fallback synchronization when connectivity returns. The session is not about a specific agent framework; it is about the system boundary around agents. Attendees will learn how to separate reasoning from action, how to map tools to least-privilege permissions, how to keep sensitive context local, and how to evaluate agent workflows when network access is unavailable or intentionally disabled.