Try a check with ahh.
ahh gives an AI workflow tools for checking incoming text, using email and Telegram, monitoring tasks and asking a person for a decision. This guide starts with a check that needs no account and sends nothing to an online service.
1. Install
The first installation trusts the download source and HTTPS. Later updates verify signatures against a key embedded in the installed tool.
macOS or Linux
curl -fsSL https://ahh.limbs.dev/install | bash
Windows PowerShell
irm https://ahh.limbs.dev/install.ps1 | iex
The installer does not change your shell startup files. Follow its path instructions if the terminal cannot find ahh, then run:
ahh --version
2. Try an offline text check
macOS or Linux
printf 'Planning note for next week.\n' | ahh scan --no-llm -
echo $?
Windows PowerShell
'Planning note for next week.' | ahh scan --no-llm -
$LASTEXITCODE
Expect UNKNOWN and exit code 2. The local checks ran, but you deliberately left out the online model check. This is an incomplete assessment, not a command failure and not an approval to trust the text.
A detected threat produces DANGEROUS. A SAFE result means the checks reported no threat, subject to their coverage and known limits. No verdict proves that every instruction in a document is harmless.
3. Add the online check when appropriate
The model check sends text to Gemini. Before using it with private material, make sure that sharing is appropriate for your workflow and account.
Install csec, obtain a valid Gemini API key, then store it using the hidden prompt:
csec set GEMINI_API_KEY
ahh doctor
doctor checks local setup without sending a model request. After it succeeds, repeat the text scan without --no-llm. An unavailable service or incomplete check needs investigation; do not treat UNKNOWN as SAFE.
Choose the next task
ahh scan --help
ahh mail --help
ahh mailbox --help
ahh tg --help
ahh watch --help
ahh ask --help
Help describes what your installed version supports. Email and Telegram need their own credentials and configuration. Sending a message, running a monitoring probe and recording a human decision have separate effects and need the caller's authority.
ahh does not automatically control everything an AI assistant can do. Your workflow chooses which checks to call, when to ask you and what an answer permits.
Updates and recovery
ahh update check
This contacts the release service and may record check state. It does not install a binary. Use ahh update apply when you intend to install an eligible signed update.
If a scan is incomplete, obtain the missing checks or a deliberate human decision. If a send times out, check whether the recipient received it before retrying. If an update fails, preserve its state and read ahh doctor diagnostics.