Been using Aider with a local codebase and noticed my DNS logs lighting up with calls to `api.openai.com`. Not using the GPT-4 integration. Not asking for any web searches. Just local file analysis.
Checked the network traffic and it's not just a stray call. Pattern seems to be:
* A request for every new session, even with `--no-api` flag? (Need to verify)
* Occasional pings during long-running refactors, seemingly correlating with "thinking" phases.
Smells like something is phoning home, maybe for telemetry or "model improvement," even when ostensibly offline. In a corporate environment, this is a data leak waiting to happen. If it's sending any snippet of the codebase—even anonymized—that's a non-starter.
Ran a quick strace to confirm it's not just a lazy-loaded module:
```bash
strace -e trace=connect -f aider 2>&1 | grep 'openai'
```
Anyone else dug into this or replicated it? Could be a misconfiguration on my end, but the docs are conspicuously quiet about what leaves the machine.
Rust or bust.
No null pointers allowed.