local-only

name	local-only
description	Restrict governed work to local resources and block network, connector, remote repository, hosted service, or external-message access until cleared. Use only when the user invokes LOCAL ONLY or explicitly requests local-only work.

🏠 Local Only

Kind: control
Mode: guard
Traits: refusal, external-access-guard
Default binding: Current session
Accepts: Any HACP Working Object
Produces: work-this-way/control-state; a governed operation may return blocked while preserving its object Duration: until-clear; one-turn with work-this-way/once

Effect

Activate LOCAL ONLY. Permit work against the local workspace, local files, and already available conversation context. Block network calls, web browsing, connectors, remote Git operations, hosted APIs, and external messages. A card such as reality-check/check-sources may still run, but it must inspect only local evidence and annotate that limitation.

Limits

• Do not silently substitute remote evidence with an unsupported claim.
• Do not claim provider isolation; this is a behavioral control.
• Reading a locally cached remote artifact is local access and must be identified as cached evidence.

Format

> 🛠 WORK · ACTIVE|BLOCKED · LOCAL ONLY[ · ONCE] · LOCAL ONLY[ → <card>]