The verification path
- Baseline the process: launch the tool, note PID.
netstat -ano | findstr <pid>— a local-first app shows no non-loopback endpoints at all across a session. - Leave it running through its features: scan, report, settings, export-preview. Every feature that needs network is a feature doing more than advertised.
- Optional heavyweight:
pktmon start -cfor a timed session, then convert the ETL and filter by process name. Total silence across a full exercise cycle is the evidence level that convinces auditors.
Why it matters enough to be testable
Marketing “privacy” claims are two-a-penny; per-permission manifests that are unable to make a call are a structural argument. On Windows the presence of a WinINet/WinHTTP stack in the binary is easy to eyeball — both the manifest and the import table tell the same consistent story when the claim is true. When it's false, one netstat row ends the conversation.
ProofTune publishes its package manifest — prerequisites, payload inventory, gates passed — alongside the candidate hash. “Nothing leaves this machine” is not a marketing sentence; it's behavior the whole build agrees to.