I gave an AI a Kill Switch. Here's what I learned about trust in local-first tooling.