Analyses run on a local query engine. Your DB never leaves your LAN.
The desktop app talks to your database directly. Cloud Run only sees the prompt and your schema names — everything else, including all document values, results, and credentials, stays inside your network.
// packages/desktop-app/sidecar → POST /analyze (prompt, fields) ← analysis (intent, pipeline) → collection.aggregate() (on localhost) ← results (never uploaded)