Jarvis

• Filesystem — read, write, glob, search.
• Git — status, log, diff, commit.
• Shell — governed; only a whitelisted command set.
• HTTP fetch — outbound requests with explicit allowlist.
• Calendar / mail.
• Workspace state — persistence, memory snapshots, run history.

The constraint was no cloud round-trips for anything that touches personal context. Models had to fit on Apple Silicon (Ollama, qwen3 family). Persistence had to be embedded (SQLite). Tool execution had to be operator-approved, not autonomous (Telegram approval flow — the agent proposes, the operator signs off, the tool runs).

• Deterministic router beats LLM-as-router for cost, latency, and predictability.
• Tool-calling latency dominates once the agent tier engages. Chunk what you can.
• Operator-in-the-loop is a feature, not a constraint. Catches more bad calls than test coverage ever will.