Privacy and local-only operation

rogrep has no telemetry, analytics, daemon, account, or outbound network path. It reads agent-owned session files and writes rebuildable index, checkpoint, and statistics data only under its own data directory. Delete that derived directory to force a clean rebuild.

rogrep web is an explicitly requested inbound HTTP listener. It uses no remote assets or external APIs. Loopback is the default. Every non-loopback or wildcard bind requires bearer authentication for data and event endpoints; only the static application shell is unauthenticated. APIs are same-origin, disable caching and framing, and send a restrictive content security policy. For SSH, prefer rogrep web --no-open plus local port forwarding instead of a non-loopback bind.