Local AI privacy proxy — redact sensitive data before sending to cloud LLMs, then restore originals in the response.