Sorry, I didn't elaborate. But "completely local" meant not doing any network calls unless specifically approved. When llm calls are completely local you just need to monitor a few explicit network calls to be sure.

In a realistic and useful scenario, how would you approve or deny network calls made by a LLM?