Inspiration
Sending scanned paperwork to an accountant or an album to a tradesperson feels routine. But a share cannot be recalled, and nobody knows everything buried in their files, least of all data about other people: a neighbour's personnummer in a co-ownership agreement, a relative in the background of a photo. Running those files through a cloud scanner to find out would itself be the breach. The only place that can safely audit a private archive is the device that already holds it.
What it does
Threshold is a share-time privacy clearance for UGREEN AI NAS. Before you share a folder or album, you name the recipient ("my accountant", "the plumber") and yourself. Threshold reads each item on the NAS, runs OCR on scans, checks photos against your named people albums, and attributes every identifier it finds to a subject: you, or a named third party.
It then judges each finding for that specific recipient. This is contextual integrity: the harm is data leaving its context, not data merely being "sensitive". Your own personnummer suits your accountant but not the plumber; a neighbour's personnummer suits neither.
The result is an advisory Exposure Brief, grouped as Third parties, You and Needs your eyes, with location, confidence and a masked source quote for every finding. You keep or pull each file; pulled files move to a private Quarantine folder only after you confirm. Then you run the share yourself. Threshold never shares, deletes or overwrites anything, and never calls a set "safe".
How we built it
Threshold is a declarative Uliya Skill: a SKILL.md and two linked references, no code. Every step is delegated to the NAS's registered experts (file-agent, document-agent, photo-agent) using only actions from capability catalog v2.0.0, and the package passes the official static checker (uliya-skill-kit 0.7.3) with zero errors and zero warnings. All processing stays on the NAS.
Challenges we ran into
- No determinism. A declarative skill cannot run pattern-matching code, so the two-sided error (a leak or an overflag) is handled by design: every finding carries a confidence and a verbatim quote, unreadable and uncertain items are escalated and never passed as clean, and the owner makes every decision.
- Not becoming a new leak. Threshold never saves the brief to a file and never tags files, masks identity and account numbers to their last four digits, shows health details only as a category, and keeps Quarantine in the owner's private home folder.
What's next
In Round 2 we will validate extraction, OCR, people matching and moves on a real iDX6011 Pro, run each of the eight test cases five times, and record the hero moment: a neighbour's personnummer caught inside a contract before it reaches the accountant. All test data is synthetic, using Skatteverket's published test personnummer.
Built With
- markdown
- on-device-ai
- ugos
- ugreen
- uliya-skill-kit
