Uses your browser's own speech recognition, so it costs nothing and no audio leaves this device until a conversation actually starts. Per device — turn it on where you want an always-on microphone. It also answers to "hi/ok/yo Jarvis", and anything you say after the name is sent as your first request.

Stored in /root/jarvis-files, the only directory the filesystem tool can see — not the app folder, which holds your API keys. Jarvis can read these; it cannot add or delete them. PDFs, Word files and photographs of documents are read on upload — a scan or a photo goes through the vision model, so check any figure that matters against the original.

A stdio server is a program this container runs. It is given only PATH-class variables plus the secrets you name above — never the rest of your keys. Tools whose names look like writes are withheld until you tick the box, and a server's own tool descriptions are treated as untrusted text.

A server only answers once its ~/.ssh/authorized_keys contains that key. JARVIS holds one dedicated keypair, mounted read-only — it cannot authorise itself anywhere.