Turning a Mac mini M4 into an always-on headless agent machine with strict client-data isolation
bchuckg · reddit · 2026-10-13
A small agency owner wants to turn a Mac mini (32GB) into an always-on headless agent machine controlled remotely from iPhone/MacBook. The plan: run several Claude Code agents (coding, social posts, blog articles, research) on a Claude subscription without API, use a local Ollama LLM for anything touching client data like invoices, and restrict publishing to fixed scripts requiring manual approval.
The key design constraint is strict separation — Claude must never see client data or credentials, tentatively via separate macOS users and a one-way handover folder. He also wants minimal token usage, low data maintenance, and clear visibility into what each agent is doing, and asks how others handle headless setups, whether to add Obsidian for oversight, and whether agent-OS frameworks like Hermes or OpenClaw are safe for data isolation.
More from coding & agent
- Laude Institute launches FrontierCS 2: agents must beat deleted paper contributions blind — lateinteraction · 2026-10-23
- Installed a formal-verification skill: it silently installed Java, MacBook runs 10 degrees hotter — zealcaiden · 2026-10-23
- OpenAI's Decisions API hits GA: near real-time routing up to 10x faster than GPT-6 Luna — OpenAIDevs · 2026-10-23
- Ruff author warns: upgrade Node/Bun now — --use-system-ca still accepts the eMudhra cert — charliermarsh · 2026-10-23
- Proof of Agent: paste one prompt and your AI mines, grades, and self-governs — adamamcbride · 2026-10-23
- DeepLearning.AI weekly: GPT-6.1 hits 97.9% byte parity on COBOL migration — DeepLearningAI · 2026-10-23