# llms-full.txt for Tiles Privacy
Expanded full-text context for tiles.run, intended for larger context windows.
Source site: https://www.tiles.run
Generated: 2026-05-25T05:58:04.546Z
Canonical index file: /llms.txt
Also available at: /.well-known/llms-full.txt
================================================================================
## Homepage (https://www.tiles.run/)
Tiles
Tiles is a local-first private AI assistant that runs on-device models with encrypted P2P sync, keeps your data and identity yours, and supports sharing chats with ATProto.
Current status: CLI alpha.
Linux availability form: https://www.tiles.run/linux
================================================================================
## Download (https://www.tiles.run/download)
Network installer for macOS:
https://download.tiles.run/tiles-0.4.9-signed.pkg
Version: 0.4.9
Size: 95.84 MB
SHA256: 603eb7d5177d4b074e04b19fd72fcfb34777b1e93ee32b4f5e01d5167d196237
Offline installer for macOS (bundled model: gpt-oss-20b-MXFP4-Q4):
https://download.tiles.run/tiles-0.4.9-full-signed.pkg
Size: 10.31 GB
SHA256: fc2bbaf0408a3355d3079bf3435a2eba145c63bea48c35d3d14bb4a518a9a748
SHA256 file: https://download.tiles.run/checksums/tiles-0.4.9-full-signed.pkg.sha256
================================================================================
## Mission (https://www.tiles.run/mission)
Our mission is to bring privacy technology to everyone.
Tiles Privacy was born from the User & Agents community with a simple idea: software should understand you without taking anything from you.
Tiles focuses on privacy-focused engineering and practical consumer experience.
================================================================================
## Blog Index (https://www.tiles.run/blog)
The Tiles Blog
Privacy technology for everyone.
Published posts: 2
================================================================================
## Blog Post: Ship it up (https://www.tiles.run/blog/ship-it-up)
Published: 2026-04-05
Author: Anandu Pavanan @madcla.ws
Author URL: https://bsky.app/profile/madcla.ws
Description: How we package and ship Tiles
Content:
We ship Tiles as a tar.gz tarball and as a native macOS .pkg . Either format follows the same broad steps. Assemble the deliverable: Package the Tiles binary and the Python venvstack artifacts into one installer payload. Run the installer: Copy the Tiles binary and Python artifacts into the correct locations on disk. Run postinstall scripts. In early releases, the tarball was the only install path. It served us well, but it had clear limits. Because the release artifact is a gzip tarball, we cannot codesign, notarize, and staple the archive itself the way we can a full installer. We run those steps on the Tiles binary only, not on the entire .gz file. Installation relies on a curl-based script. That is workable for developers and rougher for everyone else. The flow leaves little room to tailor copy, branding, or steps in the installer UI. We wanted a path that fits Apple's signing and notarization story and feels native on macOS. Installers ship as .dmg or .pkg bundles; we chose .pkg because it can run scripts, uses a familiar installer UI, and supports customization with simple HTML. What follows is how we build that .pkg for Tiles. Install file structure The layout matches the directory tree above. When we build the package, we point the tooling at this pkgroot directory as the install root. The installer copies that tree onto the destination volume and creates intermediate directories as needed. For each release, we build a fresh Tiles binary into pkgroot/usr/local/bin and place the remaining updated artifacts under pkgroot/usr/local/share/tiles/ . The build script in the repo has the full sequence. Code signing the Tiles binary Code signing gives us: A signed Tiles binary that cannot be altered without invalidating the signature. A signature from a developer certificate that Apple trusts. You need an Apple Developer account and two certificate types: DEVELOPER ID APPLICATION for the binary and DEVELOPER ID INSTALLER for the .pkg . The finished installer wraps the signed binary and the other artifacts in one compressed package. For creating and exporting those certificates, the CodeVamping macOS pkg installer article covers the details. # Signing the Tiles binary codesign --force \ --sign "$DEVELOPER_ID_APPLICATION"\ --options runtime \ --timestamp \ --strict \ "${CLI_BIN_PATH}/tiles" The snippet signs the Tiles CLI. $DEVELOPER_ID_APPLICATION is an environment variable that holds the common name of the Developer ID Application certificate. Scripts Bash scripts can run before and after the payload is laid down. We keep preinstall and postinstall scripts in a directory and pass that path into pkgbuild . The Tiles repo has those scripts ; they handle cleanup and internal setup. Building the Tiles package With the signed Tiles binary and the rest of the install tree under pkgroot , we run: pkgbuild --root pkgroot --scripts \ pkg/scripts --identifier com.tilesprivacy.tiles --version "$VERSION" \ pkg/tiles-unsigned.pkg --root is pkgroot ; --scripts points at the directory from the previous section. Customizing the installer Opening the unsigned package from the previous step shows Apple's default, minimal flow. We layer on welcome and conclusion screens, a logo, and other panels with an Apple distribution definition in XML. That file references HTML for the welcome, conclusion, and other supported steps. Our distribution_network.xml is the working example. Elements such as and point at resources we keep alongside the definition and pass into the final productbuild invocation. productbuild \ --distribution pkg/distribution_network.xml \ --resources pkg/resources \ --package-path pkg/ \ pkg/tiles-dist-unsigned.pkg productbuild reads the unsigned package and writes a distributable installer with those customizations baked in. Code signing the complete installer productsign \ --sign "$DEVELOPER_ID_INSTALLER" \ pkg/tiles-dist-unsigned.pkg \ pkg/tiles.pkg That signs the .pkg itself. The Tiles binary is already signed; signing a macOS binary and signing an installer package are different operations. The main difference is productsign instead of codesign , and the certificate we use is DEVELOPER ID INSTALLER instead of DEVELOPER ID APPLICATION . Notarizing the installer Notarization lets Apple scan the payload for malware. We upload the installer; when processing finishes, the service returns acceptance or rejection. Submission looks like this: xcrun notarytool submit pkg/tiles.pkg \ --keychain-profile "tiles-notary-profile" \ --wait tiles-notary-profile is the keychain entry name so we do not pass Apple ID details on every run. Store the profile once with: xcrun notarytool store-credentials \ "tiles-notary-profile" \ --apple-id "john.doe@gmail.com" \ --team-id "X********4" \ --password "****-****-****-****" Stapling the installer Stapling embeds the notarization ticket in the installer file so Gatekeeper needs fewer round trips to Apple when a user opens the package. xcrun stapler staple pkg/tiles.pkg What's next We also ship a fully offline installer that bundles OpenAI's gpt-oss 20B model, so Tiles can be installed without an internet connection. We are working toward making Tiles itself portable, allowing users to carry their model and data and run it from a flash drive on any compatible system. The installer requires Rosetta; on Apple Silicon Macs, it is not included by default and must be installed separately. Rosetta translates Intel binaries to run on Apple Silicon. There is a workaround for this, described in the linked GitHub issue .
================================================================================
## Blog Post: Move Along, Python (https://www.tiles.run/blog/move-along-python)
Published: 2026-02-17
Author: Anandu Pavanan @madcla.ws
Author URL: https://bsky.app/profile/madcla.ws
Description: Deterministic, portable Python runtimes for Tiles using layered venvstacks.
Content:
We have been working on Tiles . Tiles is a local-first private AI assistant that runs on-device models with encrypted P2P sync, keeps your data and identity yours, and supports sharing chats with ATProto. The Python Problem Right now, we have a polyglot architecture where the control pane and CLI are written in Rust, while local model inference runs through a Python server as a daemon. Ideally, when we ship Tiles, we should also ship the required artifacts needed to run Python on the user’s system. Since Python servers cannot be compiled into a single standalone binary, the user’s system must have a Python runtime available. More importantly, it must be a deterministic Python runtime so that the server runs exactly on the version developers expect. In earlier releases of Tiles (before 0.4.0), we packed the server files into the final release tarball. During installation, we extracted them to the user’s system, downloaded uv (a Python package manager), installed Python 3.13 if it was not already present, and then ran the server as a daemon. This approach had several issues: Downloading development-related tools such as uv onto the user’s system Relying on uv at install time to manage dependencies and run the server Increased chances of failures due to dependency or runtime non-determinism Requiring internet access to download all of the above tools Lack of a fully deterministic runtime across operating systems One of the long-term goals of Tiles is complete portability. The previous approach did not align with that vision. Portable Runtimes To address these issues, we decided to ship the runtime along with the release tarball. We are now using venvstacks by LM Studio to achieve this. Venvstacks allows us to build a layered Python environment with three layers: Runtimes Defines the exact Python runtime version we need. Frameworks Specifies shared Python frameworks such as NumPy, MLX, and others. Applications Defines the actual server application and its specific dependencies. Similar to Docker, each layer depends on the layer beneath it. A change in any layer requires rebuilding that layer and the ones above it. All components within a layer share the layers beneath them. For example, every framework uses the same Python runtime defined in the runtimes layer. Likewise, if we have multiple servers in the applications layer and both depend on MLX, they will share the exact deterministic MLX dependency defined in frameworks , as well as the same Python runtime defined in runtimes . We define everything inside a venvstacks.toml file. Here is the venvstacks.toml used in Tiles. Because we pin dependency versions in the TOML file, we eliminate non-determinism. Internally, venvstacks uses uv to manage dependencies. Once the TOML file is defined, we run: venvstacks lock venvstacks.toml This resolves dependencies and creates the necessary folders, lock files, and metadata for each layer. Next: venvstacks build venvstacks.toml This builds the Python runtime and environments based on the lock files. Finally: venvstacks publish venvstacks.toml This produces reproducible tarballs for each layer. These tarballs can be unpacked on external systems and run directly. We bundle the venvstack runtime artifacts into the final installer using this bundler script . During installation, this installer script extracts the venvstack tarballs into a deterministic directory. Our Rust CLI can then predictably start the Python server using: stack_export_prod/app-server/bin/python -m server.main What’s Next We tested version 0.4.0 on clean macOS virtual machines to verify portability, and the approach worked well. For now, we are focusing only on macOS. When we expand support to other operating systems, we will revisit this setup and adapt it as needed. Packaging the runtime and dependencies increases the size of the final installer. We are exploring ways to reduce that footprint. We also observed that changes in lock files can produce redundant application tarballs when running the publish command. More details are tracked in this issue . Overall, we are satisfied with this approach for now.
================================================================================
## Book: Community (https://www.tiles.run/book/community)
# Community
## Get Involved
Whether you are already committed to privacy technology or just beginning to reclaim ownership of your computing experience, there are many ways to get involved in the Tiles community.
To understand the project goals and architecture, start with:
- Install Tiles CLI and try it out.
- Explore the documentation: Tiles Book
## Communication and Support
If you have questions or want to discuss ideas, you can reach the team and community via:
- Discord: https://go.tiles.run/discord
- Email: hello@tiles.run
## Roadmap
Track our progress and see what's coming next on our Roadmap. The roadmap outlines our planned features, improvements, and research directions.
## RFCs
Join or contribute to the conversation about Tiles design and architecture through Tiles RFC Discussions. RFCs (Request for Comments) are proposals that introduce major features, architectural changes, or significant new areas of functionality. We welcome community input on these proposals.
## Contributing
Thanks for your interest in contributing to Tiles. We welcome contributions of all kinds, including code, documentation, design, and discussion.
### How to Contribute
You can contribute in several ways:
- Report bugs or request features by opening an issue
- Improve documentation or examples
- Submit pull requests for bug fixes, refactors, or new features
- Open an RFC discussion for proposals that introduce major features, architectural changes, or significant new areas of functionality
Before starting work, check the existing issues to avoid duplication and to align with current priorities. If you plan to work on a larger change, open an issue or discussion first to confirm scope and approach.
### Pull Request Guidelines
When submitting a pull request:
- Keep changes focused and scoped to a single concern
- Follow existing code style and conventions
- Include clear commit messages and a concise PR description
- Reference relevant issues where applicable
- Ensure all checks and tests pass
New inference backends, memory models, and improvements aligned with the roadmap are especially welcome.
## Development Setup
This guide will help you set up a reproducible development environment for Tiles. Tiles supports two environments: prod (production) and dev (development). These instructions assume you are setting up for local development.
### Prerequisites
- Rust & Cargo
- just (for task management)
- Python 3.13
- uv (for fast Python dependency management)
- Git
### Setup Steps
1. **Clone the repository:**
[code block]
2. **Install Rust dependencies:**
If you're new to Rust, see Rust Install Guide.
[code block]
3. **Install project task runner:**
just provides easy command shortcuts.
[code block]
4. **Set up the Python server environment:**
- Make sure uv is installed:
[code block]
- Sync Python dependencies:
[code block]
### Running Tiles (Development)
Open two terminal windows:
1. **Terminal 1: Start the server**
From the project root:
[code block]
2. **Terminal 2: Run the Rust CLI**
From the root directory:
[code block]
> **Tip:** Refer to the justfile for additional common commands and automation. For troubleshooting, see CONTRIBUTING.md and open an issue if you need help.
### Building Tiles installer (Development)
Install venvstacks for portable py runtime
From the project root do:
[code block]
Set the ENV in install.sh to dev
[code block]
Now tiles should be available in PATH
## Code of Conduct
By participating in this project, you agree to follow the project's Code of Conduct. Be respectful, constructive, and collaborative in all interactions.
We appreciate your time and effort in helping build Tiles.
================================================================================
## Book: Tiles Book (https://www.tiles.run/book)
import { marketingPageTitleClass } from "@/lib/marketing-page-title-classes"
Book
Technical documentation covering the models, infrastructure, and cryptography behind Tiles, the consumer product, and Tilekit, the developer-facing SDK written in Rust.
AI / LLM agents: For a machine-readable summary of this site, see /llms.txt or /llms-full.txt.
================================================================================
## Book: Licenses (https://www.tiles.run/book/licenses)
# Licenses
Tiles is free to use without limits. Licenses are optional and help fund independent development.
## Overview
- **Backer license**: for individual supporters with a one-time payment.
- **Commercial license**: for teams and organizations, priced per user per year.
- **Commercial use**: payment is encouraged, not required.
## Polar checkout details
Tiles purchases are processed through Polar, which acts as merchant of record for payment processing.
### Customer portal
After checkout, you can manage your license key, subscription renewals, billing, and related purchase details in Polar’s customer portal. Sign in and self-serve updates there:
https://polar.sh/tilesprivacy/portal/
## Backer
The Backer license is designed for individual supporters who want to help sustain the project.
### Payment
- Price: **$50 USD**
- Cadence: **one-time payment**
- Checkout: Buy Backer license
### What it includes
- Managed public relays for sync
- Valid for up to 5 devices
- Community support channel
## Commercial
The Commercial license is designed for teams and organizations using Tiles for work.
### Payment
- Price: **$100 USD**
- Cadence: **per user, per year**
- Checkout: Buy Commercial license
- Bulk purchases: support@tiles.run
### What it includes
- Self-hosted relays for sync
- Featured organization status
- Valid for up to 5 devices
- Priority support channel
## Notes
- Backer and Commercial licenses are non-refundable.
- Tiles remains free to use without payment.
- License purchases support the long-term independence of Tiles.
================================================================================
## Book: Manual (https://www.tiles.run/book/manual)
import { ClickableImage as Image } from '@/components/clickable-image'
# Manual
## Command Line Options
Commands are grouped by subcommand family: the base tiles command, identity, data layout, models, updates, ATProto linking for sharing, then peer-to-peer linking and sync.
### Main command (tiles)
Launches onboarding (first run) and the interactive REPL.
[code block]
### Account (tiles account)
Root identity and display nickname.
[code block]
[code block]
### Data folder (tiles data)
Where Tiles stores local data files.
[code block]
[code block]
### Run models (tiles run)
Start a chat session with a model; optional Modelfile path.
[code block]
[code block]
Create a new Modelfile by adding a plain text file named Modelfile:
[code block]
Use any mlx-community/ model hosted on Hugging Face in the FROM field. Other model hosts and namespaces are not supported there right now. Learn more in the Tilekit Modelfile reference.
### App updates (tiles update)
[code block]
### Peer-to-peer: linking (tiles link)
Tiles can sync chats across multiple **linked** devices peer-to-peer, with or without the internet. Linking is a one-time step so both sides consent before any sync traffic is accepted; you do not need to re-link each time you sync.
[code block]
**tiles link enable**: Puts this device in **link listener** mode. It generates a **link ticket** and waits for a link request from another device. Share the ticket **out of band** with the peer you want to link.
- If the device is **online**, the ticket is a **base64** string (easy to copy).
- If **offline**, the ticket is an **eight-character alphanumeric code** you can type on another device on the same network.
When the peer runs **tiles link enable** and supplies your ticket, this device is notified; after you **approve**, the two devices are linked.
**tiles link list-peers**: Lists linked peers by **DID** (decentralized identifier) and **nickname**.
**tiles link disable**: Unlinks a peer. Future sync requests from that peer are ignored.
### Peer-to-peer: chat sync (tiles sync)
After devices are linked, use **tiles sync** to replicate chats. Listener and initiator roles mirror linking: one side waits, the other connects using the listener’s DID.
[code block]
**tiles sync** (listener): Starts this device in **sync listener** mode: it waits for incoming sync requests.
On the **other** device, run **tiles sync** with the listener’s **DID** so the initiator targets the correct peer. If your CLI uses different syntax for the peer argument, check tiles sync --help.
When a sync run finishes, you should get a notification on the devices involved.
### ATProto (tiles at)
ATProto is currently used to share chat sessions.
- tiles at login : log in with your ATProto handle (for example, alice.bsky.social) via browser OAuth.
- tiles at logout: log out of the current ATProto account.
[code block]
Authentication currently uses a localhost callback (127.0.0.1:8988), and session state is stored locally in the Tiles database.
## Slash commands
Slash commands give you fast, keyboard-first control over Tiles in interactive chat. Type /? or /help in the prompt to open available commands and quickly run actions like checking session state, resuming prior sessions, and sharing chats without leaving the terminal. Use /bye to exit the chat session.
### Session Commands
- /status
Show the current session state.
- /sessions
List available sessions in local storage.
- /resume
Resume a specific session by ID.
### Sharing Commands
These commands require an active ATProto login. See #ATProto (tiles at).
- /share (via ATProto)
Create a shareable link for the current session.
- /share (via ATProto)
Create a shareable link for a specific session.
Example shared session link: tiles.run/share/YXQ6Ly9k...xeTI3.
## Uninstall Tiles (macOS)
The full macOS uninstall procedure now lives in a dedicated skill file that includes stop steps, installed-path cleanup, data-path cleanup, optional receipt and keychain cleanup, and warnings for destructive commands.
We are actively working on an official Tiles uninstaller.
To use it with coding agents (for example Claude Code or Codex), share the skill file URL in your prompt and ask the agent to follow it step by step while adapting only paths that differ on your machine.
Read and download it here: https://tiles.run/tiles-uninstaller-skill/SKILL.md.
================================================================================
## Book: MIR Extension (https://www.tiles.run/book/mir)
# MIR Extension
Based on the specifications defined by Darkshapes' MIR (Machine Intelligence Resource), a naming schema for AIGC and ML work, and Ollama's Modelfile, this blueprint aims to extend Modelfile's capabilities to support intent-based model chaining driven by the prompt, with an implementation currently in progress.
[code block]
## MIR Reference
Copied verbatim from: github.com/darkshapes/MIR:
> MIR (Machine Intelligence Resource)
A naming schema for AIGC/ML work.
The MIR classification format seeks to standardize and complete a hyperlinked network of model information, improving accessibility and reproducibility across the AI community.
Example:
> mir : model . transformer . clip-l : stable-diffusion-xl
[code block]
Code for this project can be found at darkshapes/MIR on GitHub.
### Definitions
Like other URI schema, the order of the identifiers roughly indicates their specificity from left (broad) to right (narrow).
#### DOMAINS
> ↑Most Specific/Decentralized
###### Dev
**Pre-release or under evaluation items without an identifier in an expected format**
Anything in in-training, pre-public release, and items under evaluation
Meant to be created by anyone, derived from code and file analysis
- Contextual
- Layers of neural networks
- Dynamic
###### Model
**Publicly released machine learning models with an identifier in the database**
Model weight tensors with arbitrary locations and quantitative dimensions
Meant to be created by file hosts, derived from research pre-prints
- Contextual
- Layers of neural networks
- Fixed
###### Ops
**References to specific optimization or manipulation techniques**
Algorithms, optimizations and procedures for models
Meant to be created by code libraries, derived from research pre-prints
- Universal
- Attributes of neural networks
- Dynamic
###### Info
**Metadata of layer names or settings with an identifier in the database**
Information about the model and tensor specifications
Meant to be created by standards community, derived from code and file analysis
- Universal
- Attributes of neural networks
- Fixed
> ↓Most General/Centralized
#### ARCHITECTURE
Broad and general terms for system architectures:
| Abbreviation | Description |
| --------------- | ----------------------------------------- |
| GRU | Gated recurrent unit |
| RBM | Restricted Boltzmann machine |
| TAE | Tiny Autoencoder |
| VAE | Variable Autoencoder |
| LSTM | Long Short-Term Memory |
| RESNET | Residual Network |
| CNN | Convolutional Neural Network |
| RCNN | Region-based Convolutional Neural Network |
| RNN | Recurrent Neural Network |
| BRNN | Bi-directional Recurrent Neural Network |
| GAN | Generative Adversarial Model |
| SSM | State-Space Model |
| DETR | Detection Transformer |
| VIT | Vision Transformer |
| MOE | Mixture of Experts |
| AET | Autoencoding Transformer |
| STST | Sequence-to-Sequence Transformer |
| ART | Autoregressive Transformer |
| LORA | Low-Rank Adaptation |
| CONTROLNET | Controlnet |
| UNCLASSIFIED | Unknown |
---
#### SERIES
Foundational network and technique types.
##### Rules
- Lowercase, hyphen only
- Remove parameter size, non-breaking semantic versioning, library names
Example: tencent-hunyuan/hunyuandiT-v1.2-diffusers
SERIES : hunyuandit-v1
Example: black-forest-labs/FLUX.1-dev
SERIES : flux1dev
In regex (roughly):
[code block]
#### COMPATIBILITY
Implementation details based on version-breaking changes, configuration inconsistencies, or other conflicting indicators that have practical application.
##### Rules
An additional SERIES label for identifying cross-compatibility
### Notes
If you would like to regenerate or update the example file here, use nnll:
MIR is inspired by:
- AIR-URN project by CivitAI
- Spandrel super-resolution registry by chaiNNer
- SDWebUI Model Toolkit by silveroxides
================================================================================
## Book: Models (https://www.tiles.run/book/models)
# Models
The local inference landscape moves quickly, and excellent new projects appear all the time. Our approach is intentionally narrower. Rather than chasing every new release, we focus deeply on integrating one model at a time within the constraints of the hardware we support. Today, Tiles is designed around everyday productivity tasks, with plans to expand into more domain-specific workflows over time. We provide a carefully tested combination of model, inference parameters, and agent harness, so users do not have to manage model selection, tuning, or scaffolding themselves.
We currently use the OpenAI gpt-oss-20b model as the primary model for everyday tasks, alongside the Harmony renderer and support for the Open Responses API to improve inference quality. Its Mixture of Experts architecture activates roughly 4B parameters during inference out of 21B total parameters, offering a strong balance between quality and efficiency.
That narrow focus gives us room to validate more deeply over time. We aim to compare against official outputs, run long-context evaluations, and integrate models directly into the agent harness to see how they actually hold up in real workflows. The exact model may change as the landscape evolves, but the constraint remains the same: local inference should be practical and credible on everyday personal machines, starting at 16 GB of system memory for real productivity tasks.
================================================================================
## Book: Overview (https://www.tiles.run/book/overview)
import Link from "next/link"
import { Bot, Check, CircleDashed, Cpu, FileCode, KeyRound, Package, RefreshCw } from "lucide-react"
import { BookFaq, BookFaqItem } from "@/components/book-faq"
import { ClickableImage as Image } from "@/components/clickable-image"
# Overview
We make two things: Tiles, our consumer product, a local-first AI assistant (currently a CLI in alpha); and Tilekit, the SDK for developers to build on the infrastructure behind Tiles.
**Status: Alpha**
Tiles is currently alpha-quality software. It is usable for everyday tasks, though you may encounter bugs and performance issues. Tilekit, the developer SDK, is experimental, not a current priority, and intended for exploratory use, not production.
## Features
Agent Harness
Native Pi agent harness for knowledge work, built around gpt-oss-20b powered on-device by [MLX.
On-device Models
Sensible default on-device models with Modelfile support for building and sharing weights. Powered by MLX on Apple Silicon.
Decentralized Identity
Locally generated DIDs, with the private key always stored locally on device.
P2P Sync
Encrypted peer-to-peer sync for chats across your linked devices, online or on your local network, with Iroh's QUIC networking stack.
@
Shared Links
Create a public or private link to a chat session, published through ATProto.
Offline Installer
Fully offline installer for secure, air-gapped installations.
Developer SDK
Use Tilekit as an app-server runtime to integrate identity, memory, sync, and agent templates in your own app, built with open standards like
Open Responses API.
## What makes Tiles different
Tiles is built around a narrow bet: one well-integrated model at a time, starting with gpt-oss-20b, optimized for credible local inference on Apple Silicon systems with 16GB+ memory while balancing privacy, capability, and everyday usability.
Capability
Tiles
Ollama
LM Studio
Jan
Osaurus
Decentralized Identity
Supported
-Not supported
-Not supported
-Not supported
Supported
Encryption
Supported
-Not supported
Partially supported
-Not supported
Supported
Sync
Supported
-Not supported
-Not supported
-Not supported
-Not supported
On-device models
Supported
Supported
Supported
Supported
Supported
Cloud models
-Not supported
Supported
-Not supported
Supported
Supported
In-house models
-Not supported
-Not supported
-Not supported
Supported
Supported
Agent Harness
Supported
Supported
Partially supported
-Not supported
Supported
Memory
-Not supported
-Not supported
-Not supported
-Not supported
Supported
Connectors
-Not supported
Supported
Supported
Supported
Supported
Sandbox
-Not supported
-Not supported
-Not supported
-Not supported
Supported
Remote Link
-Not supported
-Not supported
Supported
-Not supported
Supported
Shared Links
Supported
-Not supported
-Not supported
-Not supported
-Not supported
Developer SDK
Supported
Supported
Supported
-Not supported
Supported
Offline Installer
Supported
-Not supported
-Not supported
-Not supported
-Not supported
Cross platform
-Not supported
Supported
Supported
Supported
-Not supported
Open source
Supported
Partially supported
Partially supported
Supported
Supported
SupportedPartially supported-Not supported
## Product walkthrough
### Demo video
Watch a quick demo of Tiles:
### CLI
Onboarding flow for the Tiles CLI.
### Shared Links
View this shared chat example at tiles.run/share/YXQ6Ly9k...xeTI3. Tiles does not store a copy of the shared conversation on our servers, and the shared content is fetched directly from the user's Bluesky PDS.
Shared chat link screen shown after running a /share command.
## Frequently asked questions
Short answers drawn from our security documentation. For full context and limits, read that page.
Tiles is currently alpha-quality software. It is usable for everyday tasks, though you may encounter bugs and
performance issues. Tilekit, the developer SDK, is experimental, not a current priority, and intended for
exploratory use, not production.
Tiles is designed so the default experience runs on-device. The local server binds to localhost,
which limits exposed network surface during normal use. Configuration and application data live in standard
local directories, and you can change the user data path when needed.
No. Application state is persisted locally with encryption at rest. The Rust build uses SQLCipher-enabled
SQLite, and database connections use a passkey from secure storage. That raises the bar against casual
inspection of copied files, though it does not remove all local risk.
Public identity is separated from private keys. Device and account identity use did:key identifiers
from Ed25519 keys. Private keys and database passkeys are stored in the operating system's secure credential
store, not in plaintext app configuration files.
Peer-to-peer linking is user-mediated, not automatic. One device shows a ticket or local code; the other enters
it and explicitly accepts or rejects. In release builds, endpoints derive from your stored secret key, and peer
identity is checked against the delivered public key. Sync includes defensive controls, including a maximum size
cap for downloaded deltas before they are applied.
Sync uses Iroh for device-to-device networking. When a direct path is not practical, Iroh's public relays can help establish
the connection; we list that relay use on our sub-processors page.
The product does not currently bundle obvious analytics SDKs such as Sentry, PostHog, Segment, Mixpanel, or
similar telemetry. There is still local logging: the Python server may log request metadata and bodies to files
under the Tiles data directory, so prompt content can appear in local logs unless logging changes.
Updates can check GitHub releases and install via the hosted installer script, which depends on release and
hosting integrity rather than a stronger built-in end-user verification workflow. Dependencies are pinned and
reviewed. The macOS package is code signed, notarized, and stapled. Bundled dependencies are self-contained so
normal installation and use do not require live package downloads from the internet.
Use the published security policy and private disclosure path. Researchers can use GitHub Security Advisories or
email security@tiles.run, with expectations for acknowledgement, triage,
and coordinated disclosure. See SECURITY.md.
================================================================================
## Book: Resources (https://www.tiles.run/book/resources)
# Resources
Below is a living index of resources that inform and inspire our work.
You can view this list on Semble.
## Motivations
- ✨ This is Cuba's Netflix, Hulu, and Spotify – all without the internet
- Cuba's Underground Gaming Network
- ✨ Weathering Software Winter
- ✨ The Memory Walled Garden
- ✨ The Resonant Computing Manifesto
- ✨ Why Tech Needs Personalization
- ✨ File over app
- ✨ Local-First Software: Taking Back Control of Our Data | a mini-doc
## Links
### LLMs
- ✨ Agent Skills | Chainguard
- ✨ Code Mode: give agents an entire API in 1,000 tokens
- Comparative Analysis of Retrieval Systems in the Real World
- The Bitter Lesson of LLM Extensions
- ✨ Jan-nano Technical Report
- Minions: the rise of small, on-device LMs
- ✨ The Bitter Lesson is coming for Tokenization
- Transformer²: Self-Adaptive LLMs
- Mixture-of-Depths: Dynamically allocating compute in transformer-based language models
- ✨ Small Language Models are the Future of Agentic AI, NVIDIA Research
- LLM in a flash: Efficient Large Language Model Inference with Limited Memory
- Kinetics: Rethinking Test-Time Scaling Laws
- Enhancing Reasoning Capabilities of Small Language Models with Blueprints and Prompt Template Search
- FedVLM: Scalable Personalized Vision-Language Models through Federated Learning
- ✨ Model Merging in LLMs, MLLMs, and Beyond: Methods, Theories, Applications and Opportunities
- Your LLM Knows the Future: Uncovering Its Multi-Token Prediction Potential
- Cephalo: Multi-Modal Vision-Language Models for Bio-Inspired Materials Analysis and Design
- The GPU-Poor LLM Gladiator Arena
- ✨ The State of Open Models
- ✨ The State of On-Device LLMs
- ✨ r/LocalLLaMA
- ✨ LLMs on a Budget
- ✨ An Analogy for Understanding Transformers
- ✨ Neural networks, 3Blue1Brown
- ✨ Personalized Machine Learning
### Inference
- ✨ Introducing the unified multi-modal MLX engine architecture in LM Studio
- ✨ Pie:Programmable LLM Serving
- ✨ Serve Programs, Not Prompts
- ✨ Pie: A Programmable Serving System for Emerging LLM Applications
- ✨ Intelligence Per Watt: A Study of Local Intelligence Efficiency
- ✨ NVIDIA eGPU on macOS: RTX 3090 & 5090 Benchmarks | lucebox
- ✨ Equivariance Encryption for Private LLM Inference
- ✨ The Power of Efficiency: Edge AI's Role in Sustainable Generative AI Adoption
- WhisperKit: On-device Real-time ASR with Billion-Scale Transformers, Argmax
- Towards Feasible Private Distributed LLM Inference, Dria
- InferenceMAX™: Open Source Inference Benchmarking
- Reference implementation of the Transformer architecture optimized for Apple Neural Engine
- ✨ Understanding AI/LLM Quantisation Through Interactive Visualisations
- ✨ The Kaitchup Index: A Leaderboard for Quantized LLMs
- GGUF Quantization Docs (Unofficial)
- Reverse-engineering GGUF | Post-Training Quantization
- Choosing a GGUF Model: K-Quants, I-Quants, and Legacy Formats
### Training
- ✨ The Continual Learning Problem, Jessy Lin
- ✨ Defining Continual Learning
- ✨ Xet is on the Hub
- ✨ MIR, Machine Intelligence Resource, A naming schema for AIGC/ML work, Darkshapes
- Ellora: Enhancing LLMs with LoRA
- ✨ LoRA Without Regret
- ✨ Pretraining with hierarchical memories: separating long-tail and common knowledge, Apple
- LoRA Learns Less and Forgets Less
- ✨ Text-to-LoRA: Hypernetworks that adapt LLMs for specific benchmark tasks using only textual task description as the input, Sakana AI
- Introducing FlexOlmo: a new paradigm for language model training and data collaboration, Allen AI
- ✨ Towards Large-scale Training on Apple Silicon, Exo Labs
- LoFT: Low-Rank Adaptation That Behaves Like Full Fine-Tuning
- AirLLM: Diffusion Policy-based Adaptive LoRA for Remote Fine-Tuning of LLM over the Air
- How to Scale Your Model
- RFT, DPO, SFT: Fine-tuning with OpenAI: Ilan Bigio, OpenAI
- ✨ Hand-picked selection of articles on AI fundamentals/concepts that cover the entire process of building neural nets to training them to evaluating results.
### Memory
- ✨ mem-agent: Equipping LLM Agents with Memory Using RL
- ✨ Memory Layers at Scale, Meta FAIR
- On the Way to LLM Personalization: Learning to Remember User Conversations, Apple Machine Learning Research
- Memory OS of AI Agent
- Titans + MIRAS: Helping AI have long-term memory, Google Research
- How memory augmentation can improve large language models, IBM Research
- On the Way to LLM Personalization: Learning to Remember User Conversations
- ✨ ChatGPT Memory and the Bitter Lesson
- Anthropic's Opinionated Memory Bet
- Benchmarking Honcho
- Git Based Memory Storage for Conversational AI Agent
### Security
- ✨ A Preliminary Report On Edge-Verified Machine Learning (evML)
- A Preliminary Report On Edge-Verified Machine Learning, Exo Labs
- ✨ Defeating Prompt Injections by Design, Google Deepmind
- ✨ dstack - Open Source Confidential Computing | Phala
- ✨ Intent-Based Architecture and Their Risks
- Mind the Trust Gap: Fast, Private Local-to-Cloud LLM Chat
- MCP Colors: Systematically deal with prompt injection risk
- New physical attacks are quickly diluting secure enclave defenses from Nvidia, AMD, and Intel
- ✨ User-Agent header, MDN
### Miscellaneous
- PortableApps.com
- Mosh: the mobile shell
- ✨ Self-driving infrastructure
- ✨ OpenPoke: Recreating Poke's Architecture
- What happened to custom ROMs?
================================================================================
## Book: Security (https://www.tiles.run/book/security)
import { Callout } from 'nextra/components'
# Security
Tiles is designed around a local-first model. The goal is simple: keep personal context, identity, and memory under user control by default.
Tiles is still in alpha. Some parts of the system are already stable enough to describe clearly, while others are still being hardened.
Personal assistant trust model: this guidance assumes one trusted operator boundary per device or
gateway. Tiles is not a hostile multi-tenant boundary for adversarial users sharing one agent or gateway. If you
need mixed-trust operation, split trust boundaries with separate gateways, credentials, OS users, or hosts.
Inference runtime hardening with Stage-2 hypervisor memory isolation and hardware-backed attestation is on our
roadmap, enabling multi-tenant use cases out of the box.
## Local-First Architecture
The default experience runs on-device. The local server binds to localhost, and app data lives in standard local directories with support for a custom user data path.
## Local Data Protection
Tiles encrypts local SQLite databases at rest. The Rust application uses SQLCipher-enabled SQLite, and database connections are opened with a passkey retrieved from secure storage. That does not remove all local risk, but it does raise the bar against casual inspection of copied database files.
## Identity and Secret Storage
Device and account identity are based on did:key identifiers derived from Ed25519 keys. Private keys and database passkeys are stored in the operating system credential store rather than in app-managed plaintext configuration.
## Peer Linking and Sync
Tiles includes peer-to-peer device linking and chat sync. Linking is user-mediated: one device presents a ticket or local code, and the other side explicitly accepts or rejects it. Sync is limited to linked peers and bounded by a maximum downloaded delta size before processing.
### Iroh Relay and Sync Transport
Tiles sync uses Iroh endpoints, gossip topics, and blob tickets. In normal online operation, alpha builds rely on public Iroh relay infrastructure. On local networks, Tiles can fall back to mDNS for nearby discovery. The long-term plan is to move online relay infrastructure under direct Tiles control.
## Memory and Restricted Code Execution
Tiles currently includes a memory-agent flow that can execute generated Python against a designated memory path. That path has file-operation restrictions and basic size limits, but it is not a hardened sandbox and should not be described as strong isolation. This part of the system is transitional and not the long-term model for agent execution.
## Logging and Operational Boundaries
Tiles does not currently ship obvious built-in product analytics SDKs such as Sentry, PostHog, Segment, or Mixpanel. At the same time, the local Python server writes logs inside the Tiles data directory, and those logs may include request metadata, prompts, and request bodies.
## Updates and Supply Chain Trust
Tiles checks GitHub releases for updates and can install updates through a hosted installer script. That is convenient, but it is also a trust boundary. The current updater depends on the integrity of the Tiles release process and installer hosting rather than on a stronger built-in end-user verification flow.
Dependencies are pinned and reviewed before they are added. The macOS installer is code signed, notarized, and stapled. Tiles is also packaged with self-contained dependencies so normal installation does not depend on live package downloads.
## Vulnerability Disclosure
We publish a security policy and private disclosure path for vulnerabilities. Reports should go through GitHub Security Advisories or security@tiles.run. See SECURITY.md.
## Current Strengths
- Local-first execution model with a localhost-bound application server
- Encrypted local databases for persisted account and chat data
- OS-backed secret storage for identity keys and database passkeys
- Device identity based on cryptographic keys instead of a required centralized account
- Explicit user approval during peer linking
- Defensive bounds on synced payload size
- Published vulnerability disclosure process
## Current Limits
- Local server logs may include prompt and request content
- Agents are not sandboxed today
- The memory execution environment is restricted, but not strongly isolated
- Offline pairing codes are still an evolving part of the linking model
- The update path is convenient, but remains a privileged remote installation flow
- Some transport-level guarantees depend on upstream networking components and are not yet explained in dedicated project documentation
## Summary
Tiles already implements several concrete privacy and security controls: local-first operation, encrypted local persistence, OS-backed secret handling, and explicit peer-to-peer linking. At the same time, the project still has meaningful trust boundaries and hardening work ahead.
Tiles should not be described as trustless. It should be described as software that keeps more sensitive state local by default and makes key security decisions more visible to the user.
================================================================================
## Book: Tilekit (https://www.tiles.run/book/tilekit)
# Tilekit
Tilekit aims to be the app-server interface behind Tiles and future rich client experiences. Developers can embed it into their local clients by bundling or fetching a platform-specific App Server binary, running as a long-lived child process and communicating over bidirectional stdio JSON-RPC.
Use it when you want a deep integration inside your own product: identity, memory, sync, and agent templates. It is built with privacy-first engineering and uses open standards like Modelfile, DIDs, and UCANs, so user data, identity, and control stay on their device.
## CLI
Commands in this section are for **developers** using Modelfiles with the Tiles CLI.
### Prompt optimization
The Tiles CLI includes DSRs (dspy-rs) to optimize SYSTEM prompts in Modelfiles automatically. Use tiles optimize to refine the SYSTEM prompt in your Modelfile with the COPRO optimizer.
[code block]
By default, this will:
- Generate 5 synthetic examples automatically if you do not provide your own training data
- Use openai:gpt-4o-mini as the optimization model
- Update your Modelfile in-place with the improved SYSTEM prompt
#### Examples
[code block]
#### Options
- --data : Provide your own training data as a JSON file
- --model : Specify a different model to use for optimization
#### Requirements
Your Modelfile must contain a starting SYSTEM prompt so the optimizer knows what to build on.
#### Training data format
If you supply your own data, use JSON like this:
[code block]
#### Example
Modelfile:
[code block]
Optimize using Claude:
[code block]
This rewrites the SYSTEM line with an improved version from the optimization run.
## SDK Reference
### Modelfile Reference
Tiles supports a Modelfile format inspired by Ollama-style instructions, with runtime behavior tuned for the current local MLX pipeline.
The Modelfile parser is implemented in tilekit/src/modelfile.rs using the nom parser combinator library. It parses a text-based configuration format for defining model configurations, parameters, templates, and system prompts.
This page describes **what is parsed**, **what is validated**, and **what is actually used at runtime today**.
#### Quick Start
Minimal working Modelfile:
[code block]
FROM is required. Most other fields are optional.
#### Supported Instructions
Tiles currently parses these top-level instructions (case-insensitive):
- FROM (required, exactly one)
- PARAMETER (repeatable)
- TEMPLATE (at most one)
- SYSTEM (latest value wins)
- ADAPTER (at most one)
- LICENSE (at most one)
- MESSAGE (repeatable)
- # comments
If FROM is missing, parsing fails.
#### FROM
FROM is parsed as a string, but runtime behavior is intentionally narrower right now.
##### What works today
- Hugging Face-style **model repo identifiers**, for example:
- mlx-community/gpt-oss-20b-MXFP4-Q4
- mlx-community/Qwen3.5-4B-MLX-4bit
##### Important nuance
- Runtime cache resolution is currently implemented for model names that start with mlx-community/.
- Values outside that pattern are currently not supported by the runtime path.
- Local file paths are not wired into the model loading flow yet.
- Arbitrary model files (for example .gguf) are not currently supported via FROM.
In short: while FROM accepts a free-form string at parse time, runtime support is currently aligned to Hugging Face repo IDs in the mlx-community/* namespace.
#### SYSTEM
SYSTEM sets the system/developer instruction prompt used in chat requests.
- If multiple SYSTEM lines exist, the latest one replaces earlier ones.
- If omitted, Tiles falls back to the default Modelfile prompt for the selected mode.
This is one of the two Modelfile fields that materially affects runtime behavior today (FROM and SYSTEM).
#### PARAMETER
PARAMETER is parsed and validated against an allowlist.
Supported keys:
- num_ctx (int)
- repeat_last_n (int)
- repeat_penalty (float)
- temperature (float)
- seed (int)
- stop (string)
- num_predict (int)
- top_k (int)
- top_p (float)
- min_p (float)
Notes:
- Unknown parameter names fail validation.
- Type mismatches fail validation.
- Parameters are currently parsed/stored but not fully applied in the runtime request payload yet.
#### MESSAGE
MESSAGE supports role + content pairs.
Accepted roles:
- system
- user
- assistant
Notes:
- Messages are validated and stored.
- Current runtime conversation assembly does not directly consume modelfile.messages yet.
#### TEMPLATE, ADAPTER, LICENSE
These instructions are parsed and validated with single-value semantics:
- TEMPLATE: at most one
- ADAPTER: at most one
- LICENSE: at most one
Current status:
- They are represented in the parsed Modelfile structure.
- They are not currently wired into the main model execution path.
#### Comments
Lines beginning with # are accepted and preserved in serialized Modelfile output.
#### Current Runtime Behavior
In the current implementation, the Modelfile fields that directly influence execution are:
1. FROM (model identifier, currently mlx-community/* in practice)
2. SYSTEM (prompt override/fallback behavior)
Other parsed fields are available at parse/validation level and can be considered forward-compatible surface for future runtime expansion.
#### Example
[code block]
The example above is valid. Today, FROM and SYSTEM drive behavior directly; parameter validation still applies.
================================================================================
## Additional URLs
- Privacy: https://www.tiles.run/privacy
- Terms: https://www.tiles.run/terms
- Research: https://www.tiles.run/research
- Roadmap: https://www.tiles.run/roadmap
- Sponsor: https://www.tiles.run/sponsor
- Brand: https://www.tiles.run/brand
- Releases: https://www.tiles.run/releases
- Sub-processors: https://www.tiles.run/sub-processors
- RSS: https://www.tiles.run/api/rss
================================================================================