Paperless-ngx 3.3 on a small homelab box, Tika and Gotenberg on the NAS, a local 27B model for labeling and chat, and a WireGuard hub on a VPS so the archive opens on my phone from anywhere even though home internet is 5G CGNAT. Hardware split, versions, settings, and every gotcha with its fix.

New research traces prompt injection to a single mechanism: LLMs decide who is speaking from writing style, not from role tags. Forged reasoning takes attacks from near-zero to 60% success. Remove the style, and it collapses to 10%.

I point my coding agent at Proton Lumo for a private model with no per-token bill, riding a subscription I already pay for. The provider block, the flat-rate plans, a forty-line proxy that proves which model and tier Proton served, and an honest read on where it works.