Guides

Verifying the claims

Actualis claims to be local, read-only and networkless. Those are checkable claims, and this page is the commands rather than the reassurance.

It imports no network library

$ grep -nE 'import (socket|http|urllib|requests)' actualis.py

Returns nothing. CI enforces this on every push: an allowlist of standard library modules, and the build fails if anything outside it appears.

Watch it make no connections

# macOS
$ sudo lsof -i -P | grep -i actualis

# Linux
$ sudo strace -f -e trace=network python3 actualis.py 2>&1 | grep -i connect

Confirm what it opens

$ actualis --explain sources

Prints the exact paths every number is derived from. Compare that to what the process actually touches:

$ sudo fs_usage -w -f filesys | grep actualis   # macOS

Confirm it writes nothing

Transcripts are opened read-only. To prove it, make them immutable and run again — nothing should fail:

$ chmod -R a-w ~/.claude/projects
$ actualis --days 7

Read the source

The entire CLI is one file with no third-party dependencies, which is what makes “read the source” a real option rather than a formality. It is licensed AGPL-3.0.