Forty-five years ago, George Carlin forecast the future of AI:

Listen to what George says, if you haven’t already. You can stop about two and a half minutes in, after he talks about how all your shit is stuff and everyone else’s stuff is shit. Because that’s the reason Big AI will never be personal AI. Big AI is not a place for your stuff. It’s a place that’s full of everyone’ else’s stuff. And yours too, probably.
Worse, Big AI is a giant digestive tract, extracting value from all the stuff in the world, hoovered up so its giant brain can make faked-up answers to anyone’s questions, make faked-up writing, faked-up code, faked-up music, faked-up art. It can fake all kinds of human output that does not require a human body. Lots of that shit is useful, helful, and hell, amazing. (I use it every day.) But it’s not our shit, even though it can serve a zillion prosthetic purposes.
We need a personal place for our personal stuff. We also need AI. How can we have the latter help us with the former?
Look at this graphic here, generated by ChatGPT for me a couple years ago, when it could draw but not spell. I put the words there using Photoshop:

What would this woman’s Personal AI be?
Start with a physical place. Even if some of her digital stuff is off-site (like in a garage or a storage unit in the physical world), she has to know that place is hers.
Apple gave us the first model for this, back in the late ’80s. It was called the Knowledge Navigator:

Hats off to Tor Hagemann for pointing us to it. Really, check it out. It’s less than six minutes long, and describes the kind of thing we need. A device, not a service alone.
The place in that video is a professor’s study. For you and me, it might be a workshop or a cabin. Whatever the metaphor, we need a home on the Internet range: one as comfortable, safe, secure, familiar, and as much ours as our home in the natural world.
Our digital stuff (such as in the graphic above) is what techies call “unstructured.” It’s many different kinds of data, organized in many different ways. AI is good at dealing with unstructured digital stuff. We just don’t have AIs of our own yet, or a place for our digital stuff. But work is going on. Let’s review some.
1. Personal AI
Here’s a picture worth many more words, from the company’s Platform page:

2. Jan.ai
“Personal Intelligence that answers only to you.” It runs on one’s own machine, with local models of your own choice, privacy by default, and a cloud option. Here’s a grab from the website today:

3. OpenClaw
Here’s what its Github site says:
OpenClaw is a personal AI assistant you run on your own devices. It answers you on the channels you already use. It can speak and listen on macOS/iOS/Android, and can render a live Canvas you control. The Gateway is just the control plane — the product is the assistant.
If you want a personal, single-user assistant that feels local, fast, and always-on, this is it.
Supported channels include: WhatsApp, Telegram, Slack, Discord, Google Chat, Signal, iMessage, IRC, Microsoft Teams, Matrix, Feishu, LINE, Mattermost, Nextcloud Talk, Nostr, Synology Chat, Tlon, Twitch, Zalo, Zalo Personal, WeChat, QQ, WebChat.
Website · Docs · Vision · Third-party notices · DeepWiki · Getting Started · Updating · Showcase · FAQ · Onboarding · Nix · Docker · Discord
Lotta stuff there.
4. Kwaai
Kwaai is an nonprofit open source personal AI R&D shop with a large and active community. I volunteer there as Chief Intention Officer—a title that plays off The Intention Economy, which at least partly inspired the company. Kwaai’s main work these days is KwaaiNet, which its Github page describes this way:
KwaaiNet is a decentralized AI node architecture for Layer 8 — the trust and intelligence layer above the traditional network stack — built by the Kwaai Foundation, a 501(c)(3) nonprofit AI lab focused on democratizing AI.
Each KwaaiNet node combines:
- A decentralized trust graph (cryptographic identity, verifiable credentials, local trust scores).
- Shared, sharded LLM compute over heterogeneous CPUs/GPUs using Petals-style distributed inference. Apple Silicon Macs use llama.cpp with Metal for 30+ tok/s local inference; Linux nodes use CUDA-accelerated block sharding.
- Secure multi-tenant knowledge storage via Virtual Private Knowledge (VPK) with encrypted vector search.
- Intent-based, peer-to-peer networking that routes based on “what I need” (model, trust tier, latency), not just IP addresses.
From an app’s point of view, KwaaiNet looks like a familiar chat-completion style HTTP API. Under the hood, it is a person-anchored Layer 8 fabric where every node is tied to an accountable human or organization.
Companion Intelligence offers “the AI that you own.” Here are some more one-liners from the website:
- “Stop renting the Cloud and start owning a personal AI powerhouse.”
- “Your server. Your rules.”
- “Digital Memory”
- “A Local Home for Your Companion Memory”
- “Your private AI cloud”
- “Other agents are double agents.”
Their place for your stuff is:
- local hardware (a choice of their box or one of yours that you can turn into “your own unified private AI cluster”),
- local storage,
- local models or cloud models by choice,
- persistent memory,
- agents and apps,
- remote access,
- an app marketplace, and
- wearable and browser inputs
Companion Intelligence also has an interesting take on memory:
Your life creates valuable context every day.
It’s just spread across documents, notes, meetings, messages, and old decisions. Companion Intelligence brings that context together, so your agent can find what matters and help, more effectively, from where you left off.
Most AI tools are temporary, and interchangeable. They answer a question, finish a task, and forget the larger story. Companion Intelligence gives AI a private home base: a place to understand your files, projects, routines, decisions, and history without making someone else’s cloud the center of your life.
(For more on this angle, read Memory in the Age of AI Agents, by too many authors to list.)
Agents for Companion Intelligence can come from elsewhere. They note two so far: Hermes and OpenClaw. They also promise “universal MCP Support for OpenCode, NanoClaw, Claude, Codex, VSCode & more.”
6. Lovarys
By offering you a server (actually a repurposed Mac Mini), Lovarys is similar to Companion Intelligence, but aiming for the professional market. Its tagline is “Professional Accounting and Legal Intelligence.” It’s a project of Tor Hagemann. Here’s his Github page.
Around all of those efforts is an emerging ecosystem that (to me) seems to be trying to turn AI into an operating-system layer. Examples include:
For more guidance on where this might go forward, here are two academic papers worth visiting:
- OpenJarvis: Personal AI, on Personal Devicesi, another academic paper by many people.
- Opal: Private Memory for Personal AI, by fewer people. I
7. Apple
This is the big one, and it just dropped a shoe the size of a continent:

Siri is Apple’s Clippy. Maybe worse, because it’s still alive and unloved after fifteen years of relentless promotion and disappointment. (Start reading down from the Reception subhead on Siri’s Wikipedia page for a partial account of Siri’s failings. A lot there.) But never mind that. Instead, mind these two words:

Meaning private.
Apple is huge on personal privacy. In case you’ you’ve missed Apple’s many ads and videos, you can get the gist of the company’s privacy case here, here, here, here, and here. A couple of years back, in response to the first of those, I wrote here and here about how Apple comes up short on the privacy front, despite its many promises.But points for trying, and staying on the case, which will get a lot bigger with this next operating system.
Here’s a video in the style of a movie trailer, laying out Siri’s fancy new features. It’s annoying to watch (at least for me), but it’s a good tease.
Will what Apple brings us in version 27 of iOS and MacOS at least start to give us a place for our stuff? A truly private place? Let’s look—
1. On-Device “Personal Context”: A new architecture (not the old Siri) maps your device locally, using Apple Silicon’s Neural Engine to index information across your Apple applications: contacts, calendar, reminders, messages, emails, documents, photos. As for your non-Apple stuff, such as my million-plus photos that are not in Apple’s Photos app, it looks like it’s already on the case. When I search for “tunnel” across my photo directories with my laptop (2023 MacBook Pro running Tahoe 26.5.1), I get every shot where that word appears, plus lots of stuff that is either a tunnel or looks kinds like one. Example:

Clearly an AI does some pattern recognition there, but is that “personal context”? I dunno,
It has “Semantic Indexing,” which makes informed presumptions about the meaning of your data, and not just your keywords. Big AI does this now, but Siri will do it just for you, on your stuff, inside your place for it. Note what it says under the “Apple Intelligence in Apps” subhead here:
Express yourself through photos and images, save time with Safari, and get more done with Apple Intelligence seamlessly integrated into your everyday apps and experiences.
But do we want “seamless” everything? We need edges, boundaries, to make sense of the world. Right now I just want the option to turn that off, or not turn it on. Unless it’s the thing that sees tunnels. I don’t know, and that’s a problem.
2. Private Cloud Compute (PCC) is how Apple describes another place for your stuff: kind of a private office in Apple’s hi-rise downtown. Specifics:
For advanced features that need to reason over complex data with larger foundation models, we created Private Cloud Compute (PCC), a groundbreaking cloud intelligence system designed specifically for private AI processing. For the first time ever, Private Cloud Compute extends the industry-leading security and privacy of Apple devices into the cloud, making sure that personal user data sent to PCC isn’t accessible to anyone other than the user — not even to Apple. Built with custom Apple silicon and a hardened operating system designed for privacy, we believe PCC is the most advanced security architecture ever deployed for cloud AI compute at scale.
The authors of that text are Apple Security Engineering and Architecture (SEAR), User Privacy, Core Operating Systems (Core OS), Services Engineering (ASE), and Machine Learning and AI (AIML)—all inside the company. They say lots more at that last link, all helpful to know. So is Expanding Private Cloud Compute, by the same teams.
3. Systemwide app actions: This new assistant can, for example, cross-reference a tracking number from your email and a message thread to find who asked for it, pull out other relevant information, then automatically drop it into a reply for you to review or edit before you send it, all in your virtual cabin (device) or office (private cloud).
4. Controlled federation, anonymized gateways, a privacy shrowd, and other jive required to make this work:

I gather, from Apple’s literature, that Siri strips out your IP address and personal identifiers before making a query to an external AI. The external AI agent sees only the isolated query. This prevents the external AI from examining the personal stuff in your online home.
5. The Mac Mini, or some new dedicated place for your stuff.
News items:
- The Wall Street Journal: The Mystery of Why You Can’t Buy a Mac Mini Right Now (April 17, 2026)
- Business Insider: Tim Cook says the Mac Mini is getting snapped up for AI work ‘faster than we predicted’ — and supply is backed up (May 1, 2026)
- Tom’s Hardware: Apple warns Mac mini and Mac Studio shortages could last for months — local AI boom and memory crunch drive demand beyond Apple’s manufacturing capacity. (May 2, 2026)
- For some reason I can’t give above a link, so here it is, separately—https://www.tomshardware.com/desktops/apple-warns-mac-mini-and-mac-studio-shortages-could-last-for-months-local-ai-boom-and-memory-crunch-drive-demand-beyond-apples-manufacturing-capacity
Given all this news, I will be amazed (but not surprised) if Apple doesn’t push the next Mac Mini as the personal AI machine, meaning the place for your stuff.
Okay, so here is a table of what we’ve reviewed so far:
| System | Owner | Memory | Outside AIs | Sovereign? | Character |
|---|---|---|---|---|---|
| Apple Intelligence | Apple/person | Deep | Yes | Partial | Private cabin inside Apple’s estate |
| Personal AI | Company/person | Deep | Limited | Partial | Digital twin in the cloud |
| OpenClaw | Person | Deep | Yes | Mostly | Self-hosted AI stack |
| Jan.ai | Person | Moderate | Yes | Mostly | Personal AI workshop |
| Companion Intelligence | Person | Deep | Yes | Mostly | Personal homestead |
| Lovarys | Professional/person | Deep | Selective | Mostly | Private study or office |
| Kwaai | Person/community | Intended deep | Yes | Aspirational | Cooperative village |
| Friend | Company | Moderate | Yes | No | Companion in somebody else’s house |
Here is a tough question: What if only a giant can put together most or all of what we need? Three giants currently furnish most of our personal spaces in the digital world:
- Apple (iOS and MacOS devices, Safari browser, etc.)
- Google (Android devices, Gemini, Chrome browser, etc.)
- Microsoft (Windows OS and devices, apps, etc.)
With iOS and MacOS 27, Apple moves to the front of that pack in the personal AI space, and will likely be the only giant to offer something that looks like a place for your stuff. Given its role in the surveillance fecosystem, Google can’t be trusted. Microsoft still has Micro in its name, but it has become much more of an enterprise company in recent years. So, among giants, Apple is it.
Now let’s talk about agents.
Apple sees you with just one: Siri, or whatever Apple lets you call it. But you will probably need many agents: one or more for health (in various specialties), financial (banking, investment, credit), travel (airlines, car rental, hotels), home economics (property, stuff in storage, scheduling the kids, keeping the car working), legal (all your contractual commitments, plus much better customer-company interactions than are possible today).
This can get very complicated. As Opaque explains here,
Here’s the thing: if a single chatbot request is too risky to run unverified, what does that say about agents?
A chatbot is one request in, one answer out. An agent runs that risk in a loop: reading email, opening files, calling tools, handing work to other systems, unattended and at machine speed.
No breach required. An agent doing exactly the job you gave it moves your data constantly into places you don’t control and mostly can’t see.
Now wire thousands of agents together, the way every enterprise is planning to this year. Whatever the per-step risk is, compounding turns it into a certainty.
Apple just deployed Confidential AI to protect the smallest risk surface in AI. Enterprises are wiring up the largest with nothing underneath it.
Opaque doesn’t care about you or your “smallest risk surface in AI.” It sells arms to enterprises. But it does make a good point in its opening sentence:
“Apple looked at a simple chatbot, the single most contained form of GenAI there is, and decided the data it leaks is too dangerous to ship to their customers without Confidential AI underneath it.”
To Apple, the more personal the context, the higher the privacy stakes. That’s why it believes personal AI has to run—
- on-device (the place for your stuff) and
- in a privacy-walled cloud infrastructure (your private office in Apple’s high-rise cloud)
The former can actually cover a lot of ground in your life, just by helping you get on top of all the stuff in your digital home. It can also handle some simple interactions with outside entities, such as MyTerms ceremonies and record-keeping.
But you’ll need much more from your personal AI if you’re going to scale your life out into the larger world, where nearly every company, every government agency, everything you might subscribe to, and even every church and nonprofit, wants to have AI agents for interacting with the you and your digital agents.
As of today, Apple isn’t ready for that. Nor is anyone else. But researchers are helping. In Too Private to Tell: Practical Token Theft Attacks on Apple Intelligence, four researchers from Ohio State University,say this in their abstract:
Apple Intelligence is a generative AI (GenAI) service provided by Apple on its devices. While offering a similar set of features as other similar GenAI services, Apple Intelligence is claimed to be designed with an extra focus on user security and privacy through a two-stage authentication and authorization design using anonymous access tokens. In this paper, we present our investigation into this token issuance mechanism with a goal to reveal possible vulnerabilities using traffic analysis, reverse engineering, and cross comparison with Apple’s public documentation. Specifically, we present the Serpent attack, the first practical cross-device token replay attack against Apple Intelligence that allows the attacker to steal the access tokens from the victim’s device and utilise them on a different device, with all usage rate-limited against the victim. We have achieved successful attacks on the latest macOS 26 Tahoe and demonstrated that an attacker, who even has used up its own allowance, can immediately regain access to Apple Intelligence service. We have responsibly disclosed the vulnerabilities to the vendors and received confirmation from Apple with CVE assigned and bounty given. Our results highlight a general lesson for built-in AI services: Anonymising identity does not by itself make the AI service secure; Enforcing non-transferability requires cryptographic binding to the rightful user.
We assume that Apple is addressing those concerns, plus a near-countless number of others, with MacOS 27 and iOS 27. We’ll see later this year, presumably. (Apple is better with promises and forecasts than most others, but not perfect.)
Humans invented privacy with the technologies we call clothing and shelter. We don’t have clothing yet in the digital world, or we wouldn’t be walking worse-than-naked across the Net, covered with thousands of invisible data-sucking ticks called cookies and tracking beacons: parasites that report who-knows-what to god-knows-who, across thousands of unseen and unknown paths.
But we might get shelter, or the beginning of a working model for it—a place for our stuff—from Apple and these other companies and projects.
Apple seems to understand some of this, at least architecturally, to some degree. I think others (including those listed above) understand it more deeply. But none of them have Apple’s heft.
As for the enterprise side of this, there are growing bodies of work coming from Nitin Badjatia, Iain Henderson, and Jamie Smith. All three see empowered customers coming to the marketplace with agentic AI capabilities that will strip the gears of existing enterprise systems, including those with AI agents.
In Confidential AI Just Hit Escape Velocity (published on 13 June), Aaron Fulkerson, CEO of Opaque, writes this:
Apple just set the bar every enterprise will be measured against
Escape velocity is the moment a category stops needing evangelism, when the question flips from “do I really need this?” to “why don’t you have it?” Three things flipped it this month.
First, the existence proof landed at the hardest difficulty setting. Apple just rolled out the largest Confidential AI deployment in history: every iPhone, at consumer latency, consumer cost, consumer scale. Every objection enterprises have leaned on, too slow, too expensive, more than we need, just got falsified a billion times over by a phone.
Second, this is already how the giants operate. Meta runs WhatsApp message AI through private processing. Google built Private AI Compute so Gemini can process your personal data in a sealed environment that, in Google’s own words, not even Google can access. Anthropic and TikTok run their own implementations. And Microsoft, Google, and NVIDIA ship the underlying confidential infrastructure across their clouds and silicon. The pattern is consistent: every company with world-class security talent, when forced to put AI against sensitive data at scale, lands on the same architecture. When that many teams solve the same problem independently and arrive at one answer, you’re looking at convergence.
On our side—the customer’s side—we need confidential personhood, based on personal sovereignty: root for the person. In other words, personal AI needs to be operated by the person, not just for the person.
So let’s suppose Opaque succeeds perfectly. Enterprises will have attestable hardware, secure enclaves, confidential containers, encrypted memory, verifiable runtimes, machine-speed agents, and other whatevers we’ve been reading about.
We will need the same. The flow should go like this:
Natural person
↓
Personal AI
↓
Personal terms (MyTerms)
↓
Confidential runtime
↓
Outside agents and services
↓
Network
Note also that the flow here is top-down from the person, the individual—rather than bottom-up from “the consumer” or “the user.”
Almost everybody talking about agentic AI today is looking only at the lower half. But that half won’t run without our permissions from the upper half. That’s why we (the working group I chaired) worked for nine years on IEEE 7012-2025—Standard for Machine-Readable Personal Privacy Terms. Its nickname is MyTerms. As I say there, MyTerms is the only way we’ll get personal privacy in the digital world. Apple, please adopt it. Everyone else, jump on board too. It’s a radically simple to implement. From that last link:
MyTerms are contractual agreements about personal privacy that you proffer as the first party, and the company agrees to as the second party. With MyTerms, you don’t “consent” to the company’s privacy policies or whatever they say about their use of cookies. They agree to your privacy requirements, which will limit the use of cookies and tracking tech to only what you allow. You are not a mere “user” or “client.” You are an independent human being operating with full agency.
In a way, Aaron Fulkerson’s post argues a need for work on the upper half. Because, while he says, “the request never travels on trust,” our social and economic lives are based entirely on trust: contracts, promises, agreements, agency, representation, delegation.
If my personal agent books a hotel, negotiates a subscription, grants limited use of my health data, tells my bank to move money, buys something, or participates in market intelligence that flows both ways, those acts and processes aren’t just computations and transactions. They are relationships. And those require identity, delegated authority, obligations, records, audit trails, and remedies. Those all need to start with My Terms.
At scale, remedies must be based on ODR (online dispute resolution), which is thankfully a mature field.
I suspect Apple, Opaque, and MyTerms are each solving a different problem posed by a place for my stu ff:
| Layer | Question | Example |
|---|---|---|
| Confidential computing | Can I trust the machine? | Opaque, et. al. |
| Personal context | Does the machine know me? | Apple, et. al. |
| Personal sovereignty (confidential personhood) | Does the machine represent me? | MyTerms |
| Dispute & accountability | What happens when things go wrong? | ODR |
In each case the place for my stuff is a machine. My (or your) machine, and possibly your private cloud. Nobody today is building that whole stack. Nor should anybody. Not if we want each layer to scale.
So here is a question. What if:
- Apple provides the shelter (then competitors follow),
- Opaque (and its competitors) provides the locks,
- Linux and open source hacks provide the plumbing, and
- MyTerms provides the constitution—or at least a solid ground under a new constitution for personal agenc, independence, and privacy online?
If personal AI becomes ubiquitous, agents will do things that matter legally and socially. The questions that matter then become, “Under whose authority?” and “How is that authority secured?”
The answer to both require contracts in which the person is the first party. Fortunately, contract law is well established everywhere, and contract itself is specified by Article 6 of the GDPR as one the the lawful bases for others to process one’s personal data. (Dive deeper here if you like.)
So, while we wait for Apple to drop the other giant shoe, let’s get its alternatives farther downstream, and start putting MyTerms to use. Our home—places for our stuff—on the Net won’t be secure without them.









