This guide runs Redact’s local AI with remote TCP and UDP denied at the process level. It uses macOS sandbox-exec, so it works on macOS only. On Linux or Windows, disconnect the machine from the network instead; the app needs no other change. Before you start, download both models. The offline commands stop with QVAC cache is incomplete if any model file is missing.

​
Run one cached analysis

It checks that a remote request fails, then analyses the test chat image. Look for:
and a run with "status": "ready". Expect about 30 seconds. If osNetworkDenied is false, the command throws Process sandbox did not block remote networking and proves nothing.

​
Run the full app offline

  1. Build and start the app:
  2. In a second terminal, start the service inside the sandbox:
  3. Use the app at http://localhost:3101 as usual. Localhost traffic is allowed; everything else is denied for the service process.
The sandbox applies to the service process only. The browser and the Next.js server are not sandboxed.

​
Next