$ tail -f /var/log/sanctum/audit.log
$ _
$ sanctum status --capabilities
┌― document search ――――― ready
├― news monitoring ――――― ready
├― SEC tracking ――――――― ready
├― macro analysis ―――――― ready
├― portfolio (IBKR) ―――― ready
├― private dashboard ――― ready
└― reporting ―――――――――― ready
all running locally · 0 cloud calls
$ sanctum router --policy
default → local
match: tag=public → cloud (logged)
match: tag=portfolio → local · NEVER cloud
match: tag=client-doc → local · NEVER cloud
last 24h · 2 891 queries · 0 egress