All code generation & storage is encrypted and wrapped by a YubiKey.

Running code requires a second‑factor OTP/TOTP from the same YubiKey.

If the device can’t handle the workload, LDA warns the user and offers a secure cloud‑inference fallback.

The assistant stays offline except for signed updates or an explicit, user‑approved cloud request.

Implement the modules, follow the testing plan, and you’ll have a privacy‑preserving, hardware‑rooted Lumo Desktop Assistant that can safely generate, store, and execute programs on demand.