Decode corporate subtext and check tone before you send. Local-first by default; cloud only with your explicit consent.