Blog
Notes from building an AI that runs on your own machine — how it works, what we decided, and what broke on the way. The unabridged version is the git history; the disasters live in the bug journal.
Quenderin for Android is in closed beta — how to get in
20 July 2026 · Android
The native Android app is in Google’s closed-testing track. Two steps to join — the testers group, then the Play opt-in — plus an honest look at what the Android build is, what isn’t there yet, and why Google makes you join a group first. Read it →
Never trust a model file until it’s verified
20 July 2026 · engineering
A model is multi-gigabyte untrusted bytes going into a native C++ parser. The gate between “downloaded” and “loaded” — HTTP status before the first byte, GGUF magic, SHA-256 — the App Store rejection that proved we needed it, and why a pinned hash still rots. Read it →
The crash that only happened after you’d used it
20 July 2026 · engineering
A SIGABRT on every ⌘Q, but only after the first message — 11 byte-identical crash
reports in a day. llama.cpp’s Metal backend asserting inside C++ static destructors at process exit,
and a one-line fix (_exit(0)) with a real cost. Read it →
Probe, download, offline — how setup actually works
20 July 2026
“One download, then it’s yours” — but a promise isn’t an explanation. What actually happens in each of the three steps, why it’s built that way, and where each one can bite you. Every piece maps to code you can read. Read it →
A computer-use agent that never leaves your Mac
6 July 2026
The agent now drives most of your Mac — files, scriptable apps, your Apple Shortcuts, and any
GUI via accessibility — entirely on-device. A private alternative to cloud agents like Cowork:
it asks before every change, logs it per task, rehearses with --dry-run, and can
undo the whole thing even in a new session. Read it →
The agent grows hands — locally
5 July 2026
Grant a folder, state the goal, approve the plan, undo anything. Quenderin's agent now organizes files — the first real slice of local autonomous computer usage, with every safety property enforced by architecture, not model behavior. Read it →
The terminal gets a seat
4 July 2026
quenderin chat brings the local models to the command line — a streaming
REPL plus a pipe mode that turns git diff | quenderin chat -p "review this"
into code review that never leaves your machine. Includes the two bugs we hit shipping
it, because that's how we do release notes. Read it →