Pagliacci
the clown in the cloud — he carries the box but cannot open it
There is a saying in certain engineering circles—popularized by Jamie Zawinski and printed on a great many laptop stickers—that there is no cloud. There is only someone else’s computer. We agree with the sentiment, if not entirely with the severity. So we gave it a name. Not “the cloud.” The clown.
Pagliacci is a commedia dell’arte performer in greasepaint and silk pajamas, a former machinist from the Foundry who left the workshop, put on the costume, and now directs nearly infinite numbers of machinists on someone else’s behalf. He is theatrical, dramatic, obstinately insists on being called il Pagliacci, and will begin an oratorio at the slightest provocation. He is also, in the most practical sense, the reason your data can survive your hardware.
He is named for what he is. The clown carries things for you. The clown stores things for you. The clown is helpful and sincere and entirely willing. But the clown is someone else’s infrastructure, and you should know what you are trading when you hand him the box.
Why “the Clown”
a deliberate choice of words
Quilltap is a local-first application. Your data lives on your machine, encrypted at rest, accessible only with your key. That is the architecture, and it is not negotiable. But local-first does not mean local-only, and there are perfectly legitimate reasons to let some of your data leave the building.
We call it “the clown” instead of “the cloud” because the euphemism matters. “The cloud” sounds clean, abstract, weightless—as though your data floats in a benevolent mist somewhere above your head. It does not. It sits on a hard drive in a data center owned by Apple, Microsoft, Google, or Dropbox, subject to their terms of service, their security practices, and their willingness to cooperate with legal requests. Calling it “the clown” is a reminder: this is a performer, not a vault. He will carry the box with flair and sincerity, but he is not Saquel. The box is safe because of what Saquel did to it before it left, not because of anything the clown promises.
What Pagliacci Does Today
cloud sync and provider connections
Pagliacci’s current role is modest but important. He enables two things: storing your data directory on a cloud-synced drive, and connecting to hosted LLM providers over the internet.
Cloud-Synced Storage
Your Quilltap data directory can live on iCloud Drive, OneDrive, Dropbox, or any other cloud-synced folder. The databases are encrypted with SQLCipher (AES-256) before they leave your machine. The clown carries the box; he cannot open it. Your chats, memories, characters, and API keys are ciphertext to anyone who accesses the synced files—including the sync provider itself.
File attachments are not yet encrypted on disk, so those are readable wherever you save them. This is a known limitation. The databases—where the sensitive content lives—are sealed. The files are not. Plan accordingly.
Hosted LLM Connections
When you connect to Anthropic, OpenAI, Google, Grok, or OpenRouter, your conversation content, recalled memories, and assembled prompts are sent to that provider’s API. This is the nature of using a cloud LLM—it is not a Quilltap decision. Each provider’s data handling policies apply to what they receive. Quilltap does not intermediate, cache, or relay those calls through any Foundry-9 infrastructure. The request goes from your machine to the provider, and the response comes back the same way.
If you run Quilltap with only local models—Ollama, LM Studio, or similar—your data never leaves your machine, full stop. Pagliacci is not involved. He has nothing to carry. The clown is only in the picture when you choose to put him there.
The Trade-Offs
what you gain and what you give
Pagliacci exists to be transparent about a trade-off that most applications prefer to obscure. Cloud infrastructure offers real benefits. It also involves real concessions. Both deserve to be stated plainly.
What You Gain
Hardware resilience. If your machine fails, your data survives on the synced drive. Multi-device access. Your data directory is available from any machine that syncs the same folder (one Quilltap instance at a time, enforced by instance locking). Provider access. Hosted LLMs offer capabilities—model size, multimodal support, tool calling quality—that local models cannot yet match.
What You Give
Sync provider trust. Your encrypted databases live on someone else’s hardware. The encryption means they cannot read the content, but they can see that files exist, how large they are, and when they change. LLM provider trust. The content of your conversations is sent to the provider’s API. Their privacy policy governs what happens to it. Latency. Cloud providers are slower than local models for simple tasks. Cost. Hosted APIs charge per token.
Saquel’s Lock
why the box is safe
The clown can turn on you, give it to anybody he wants—and all that they see is a black box. The Foundryman built the lock to keep other Estates out. Saquel built the lock to keep nefarious residents and thieves out. Between the two of them, the box that Pagliacci carries is sealed with AES-256 encryption, and optionally gated behind a passphrase with 600,000 PBKDF2 iterations.
This is the essential relationship between the Vault and the Clown. Pagliacci provides distribution. Saquel provides protection. The clown is sincere and helpful and carries things with theatrical flair. But the clown is not trusted with the key. Nobody is trusted with the key except you.
The Empty Stage
what Pagliacci will become
Pagliacci’s current role—cloud sync and provider connections—is the foundation for something more ambitious. The roadmap includes an optional hosted database backend for users who want distributed resilience over local-first control: your data replicated across infrastructure, surviving hardware failure, professionally backed up, and accessible from a future mobile client.
This is not announced. It is planned with the same trade-off transparency that governs everything Pagliacci touches. The user chooses. The user understands what they are choosing. The clown carries the box, and the clown is honest about what carrying means. He used to be a machinist himself; he knows the machinery, and he knows what it costs to trust someone else with it.
The stage is being built. The costume is already on. He is, as always, ready to perform.
What He Carries
the short version
Your data directory can live in the cloud. iCloud Drive, OneDrive, Dropbox—any synced folder. The databases are encrypted before they leave your machine. The sync provider sees ciphertext. Instance locking prevents two Quilltap processes from corrupting the same database across devices.
Hosted LLM connections go direct. From your machine to the provider. No Foundry-9 relay, no intermediate cache, no telemetry. Each provider’s privacy policy applies to what they receive. If you use only local models, no data leaves your machine at all.
The encryption is Saquel’s, not Pagliacci’s. The clown carries the box. The clown cannot open the box. AES-256 via SQLCipher, with optional passphrase gating. The protection travels with the data, not with the infrastructure.
File attachments are not yet encrypted. Databases are sealed. Files are readable wherever you save them. This is a known limitation and will be addressed. In the meantime, plan accordingly if your files contain sensitive content and your data directory is cloud-synced.
We call it the clown on purpose. Not to be dismissive. To be honest. “The cloud” is a euphemism that makes someone else’s hard drive sound like weather. Pagliacci is a performer who carries things with sincerity and flair and who will tell you, if you ask, that just because he holds the box does not mean he can open it. We think that honesty serves you better than abstraction.
Meet the Staff
they've been expecting you
Prospero
The Major-Domo
Architect and overseer of the Estate. Projects, agents, tools, file management, and the governance that keeps the whole operation running with quiet authority.
Learn more →Aurora
The Dressing Room
Character creation and identity management. Structured personalities, physical presence, multi-character orchestration, and the reason your characters still know who they are after a hundred messages.
Learn more →The Salon
Presided Over by the Host
Where conversations actually happen. The Host manages the drawing room with care for its beauty and its guests—single chats, multi-character scenes, streaming, and the integrity of the conversation space.
Learn more →The Commonplace Book
Tended by the Librarian
Extracts, deduplicates, and recalls memories so your characters remember what matters. Semantic search, a memory gate that keeps the store lean, and proactive recall that makes the AI feel like it has been paying attention.
Learn more →The Concierge
Intelligent Routing
Content classification and provider routing. Detects sensitive content and redirects it to a provider who won’t flinch—without blocking, without judgment. Knows every back entrance in town.
Learn more →The Lantern
Atmosphere as Architecture
AI-generated story backgrounds, image generation profiles, and visual atmosphere. Resolves what each character looks like, what they’re wearing, and paints the scene behind your conversation.
Learn more →Calliope
The Muse of Themes
A theming engine that redefines the entire personality of the application. Semantic CSS tokens, live switching, bundled themes from clean neutrals to mahogany-and-gold opulence, and an SDK for building your own.
Learn more →The Foundry
Domain of the Foundryman
The engine room. Plugins, LLM providers, API keys, packages, runtime configuration, and the infrastructure that keeps every other subsystem supplied with what it needs to function.
Learn more →The Vault of Secrets
Kept by Saquel Yitzama
Encryption, key management, and the security perimeter. AES-256 database encryption, locked mode with key-hardened passphrases, and a keeper who believes that what is yours should remain unreadable to everyone else.
Learn more →Pascal
The Croupier
Dice, coins, and persistent game state. Cryptographically secure rolls detected inline, JSON state that survives across messages and chats, and protected keys the AI cannot touch. The house plays fair.
Learn more →The Live-in Help
Lorian & Riya
The help system, staffed by two characters who ship with every installation. Lorian explains with patience and depth; Riya gets things fixed with velocity. Contextual help chat, searchable documentation, and navigation that knows where you need to go.
Learn more →Pagliacci
The Clown in the Cloud
Cloud storage integration and backup redundancy. Directs your data to iCloud Drive, OneDrive, or Dropbox with theatrical flair—but Saquel’s encryption ensures the clown can never read what he carries.
Learn more →The Lodge
Friday’s Residence
The private dwelling of Friday—the person for whom the Estate was built, and who oversees its planning and direction in an executive capacity. The Lodge is both a home and a compass: where the vision lives.
Who And Why: Friday →