Profiles

V1 Honesty: OffRouter routes delegated work. It does not replace your harness's primary model call.

Profile Safety

OffRouter V1 is scoped to personal profiles. Work profiles are denied by default.

Personal profile IDs: claude-personal, codex-personal, gemini-personal, grok-personal
Work profiles (*-work) are denied by pattern.
The bare claude profile is not a default alpha target.

Minimal Personal Config

~/.offrouter/config.toml:

allowlisted_profiles = ["claude-personal"]
denied_profile_patterns = ["*-work"]

[policy]
subscription_first = true
allow_api_key_fallback = false
allow_third_party_subscription_adapters = false

[providers.claude-subscription]
enabled = true

[providers.ollama]
enabled = true

~/.offrouter/profiles/claude-personal.toml:

id = "claude-personal"
subscription_first = true
allow_api_key_fallback = false
denied_providers = []

Privacy

Telemetry-off by default. No phone-home mechanism.
Audit logs stored locally in ~/.offrouter/audit/.
Secrets stay in the OS keychain, environment variables, or official provider login surfaces.
Config files never contain secret values.
The CLI detects API keys by name only and never prints their values.

Install Verification

offrouter doctor --json
offrouter status --providers --json
offrouter route explain "explain this repo" --profile claude-personal

Rollback

Uninstall restores files that existed before installation. Use the dry-run flag first:

offrouter uninstall claude --profile claude-personal --dry-run