Beacon

Active person

Kes (per-019f4f0e-aff2-7b79-96b5-868d1b8b46a3)

Session identity: beacon-web — resolved server-side by Hearth. Beacon never asserts a person_id. Bind this same identity to the household person (see docs/integrations/web-and-phone-apps.md) to share memory with Lumen/Aether.

Cloud policy

Auto (default) — Hearth may send a genuinely complex prompt to a cloud model on its own, at least cost. Manual only — cloud is used ONLY when you explicitly pick "Model: cloud" on a prompt yourself; Hearth never escalates for you. Either way, privacy rules and high-stakes topics always stay local regardless of this setting.

Current: Auto

Audit timeline

• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet
• Memory read — ok · context-packet

Human-readable events only — raw restricted content never appears here.

System status

Trust & policy: enforced by Hearth (Vouch Guard).

Beacon presents choices and captures consent. Hearth resolves identity, enforces VG, assigns truth, and is the only writer of canonical memory.