Private by construction
A hard-coded URL whitelist (llm_client::validate_local_url) rejects any non-loopback
HTTP endpoint at the network boundary. A bug in user settings cannot leak a transcript to a
cloud provider — the wire simply won't carry it.