Update charter.md

README.md

@@ -13,6 +13,7 @@ funded through our [Open Collective](https://opencollective.com/inference-cooper
 - **New here?** → [Getting started](getting-started.md) — join, use the chat, and get involved in governance.
 - **Which models can I use?** → [Models](models.md) — the full catalog of providers and models.
 - **Want API access?** → [API access](api-access.md) — use our models programmatically.
+- **Want community chat?** → [Getting started · Matrix](getting-started.md) — our federated Matrix server, including how to connect from any client and how to use an existing Matrix account.
 - **Curious how it works?** → [Infrastructure](infrastructure.md) — a map of the stack and the codebase.
 - **Need help or have an idea?** → [Support & feature requests](https://git.inference.coop/co-op/support) — open an issue.
 
@@ -20,6 +21,7 @@ funded through our [Open Collective](https://opencollective.com/inference-cooper
 
 - **Website:** https://inference.coop
 - **AI Chat:** https://chat.inference.coop
+- **Matrix chat:** https://matrix.inference.coop
 - **Member Dashboard:** https://dashboard.inference.coop
 - **Governance forum:** https://forum.inference.coop
 - **Source code:** https://git.inference.coop

api-access.md

@@ -57,7 +57,7 @@ endpoint configuration:
 - **API type / protocol:** "OpenAI compatible" (or `openai-completions` where a
   protocol string must be named) — not "Ollama", "Anthropic", or "Responses"
 - **API key:** your member key (the `sk-…` string)
-- **Model:** one from the [model list](models.md), e.g. `tinfoil/deepseek-v4-1-flash` or `greenpt/green-r`
+- **Model:** one from the [model list](models.md), e.g. `tinfoil/deepseek-v4-1-flash` or `greenpt/glm-5.3-flash`
 
 A typical provider entry looks like:
 
@@ -71,9 +71,8 @@ A typical provider entry looks like:
       "models": [
         { "id": "tinfoil/deepseek-v4-1-flash" },
         { "id": "tinfoil/gpt-oss-120b" },
-        { "id": "tinfoil/glm-5-3-flash" },
-        { "id": "greenpt/green-r" },
-        { "id": "greenpt/green-l" }
+        { "id": "tinfoil/glm-5.3" },
+        { "id": "greenpt/glm-5.3-flash" }
       ]
     }
   }

charter.md

@@ -8,7 +8,7 @@ The Inference Cooperative seeks to advance accountable AI grounded in democracy,
 
 ## Code of Conduct
 
-Members must adhere to the [Contributor Covenant](https://www.contributor-covenant.org/).
+Members must adhere to the [Contributor Covenant](https://git.inference.coop/co-op/docs/src/branch/main/code-of-conduct.md).
 
 ## Membership
 

code-of-conduct.md

@@ -0,0 +1,91 @@
+
+# Contributor Covenant 3.0 Code of Conduct
+
+## Our Pledge
+
+We pledge to make our community welcoming, safe, and equitable for all.
+
+We are committed to fostering an environment that respects and promotes the dignity, rights, and contributions of all individuals, regardless of characteristics including race, ethnicity, caste, color, age, physical characteristics, neurodiversity, disability, sex or gender, gender identity or expression, sexual orientation, language, philosophy or religion, national or social origin, socio-economic position, level of education, or other status. The same privileges of participation are extended to everyone who participates in good faith and in accordance with this Covenant.
+
+## Encouraged Behaviors
+
+While acknowledging differences in social norms, we all strive to meet our community's expectations for positive behavior. We also understand that our words and actions may be interpreted differently than we intend based on culture, background, or native language.
+
+With these considerations in mind, we agree to behave mindfully toward each other and act in ways that center our shared values, including:
+
+1. Respecting the **purpose of our community**, our activities, and our ways of gathering.
+2. Engaging **kindly and honestly** with others.
+3. Respecting **different viewpoints** and experiences.
+4. **Taking responsibility** for our actions and contributions.
+5. Gracefully giving and accepting **constructive feedback**.
+6. Committing to **repairing harm** when it occurs.
+7. Behaving in other ways that promote and sustain the **well-being of our community**.
+
+
+## Restricted Behaviors
+
+We agree to restrict the following behaviors in our community. Instances, threats, and promotion of these behaviors are violations of this Code of Conduct.
+
+1. **Harassment.** Violating explicitly expressed boundaries or engaging in unnecessary personal attention after any clear request to stop.
+2. **Character attacks.** Making insulting, demeaning, or pejorative comments directed at a community member or group of people.
+3. **Stereotyping or discrimination.** Characterizing anyone’s personality or behavior on the basis of immutable identities or traits.
+4. **Sexualization.** Behaving in a way that would generally be considered inappropriately intimate in the context or purpose of the community.
+5. **Violating confidentiality**. Sharing or acting on someone's personal or private information without their permission.
+6. **Endangerment.** Causing, encouraging, or threatening violence or other harm toward any person or group.
+7. Behaving in other ways that **threaten the well-being** of our community.
+
+### Other Restrictions
+
+1. **Misleading identity.** Impersonating someone else for any reason, or pretending to be someone else to evade enforcement actions.
+2. **Failing to credit sources.** Not properly crediting the sources of content you contribute.
+3. **Promotional materials**. Sharing marketing or other commercial content in a way that is outside the norms of the community.
+4. **Irresponsible communication.** Failing to responsibly present content which includes, links or describes any other restricted behaviors.
+
+
+## Reporting an Issue
+
+Tensions can occur between community members even when they are trying their best to collaborate. Not every conflict represents a code of conduct violation, and this Code of Conduct reinforces encouraged behaviors and norms that can help avoid conflicts and minimize harm.
+
+When an incident does occur, it is important to report it promptly. To report a possible violation, **contact the administrative team at info@inference.coop.**
+
+Community Moderators take reports of violations seriously and will make every effort to respond in a timely manner. They will investigate all reports of code of conduct violations, reviewing messages, logs, and recordings, or interviewing witnesses and other participants. Community Moderators will keep investigation and enforcement actions as transparent as possible while prioritizing safety and confidentiality. In order to honor these values, enforcement actions are carried out in private with the involved parties, but communicating to the whole community may be part of a mutually agreed upon resolution.
+
+
+## Addressing and Repairing Harm
+
+**The Community Moderators consist of the disputes working group or, if it is not yet formed, the General Manager.**
+
+If an investigation by the Community Moderators finds that this Code of Conduct has been violated, the following enforcement ladder may be used to determine how best to repair harm, based on the incident's impact on the individuals involved and the community as a whole. Depending on the severity of a violation, lower rungs on the ladder may be skipped.
+
+1) Warning
+   1) Event: A violation involving a single incident or series of incidents.
+   2) Consequence: A private, written warning from the Community Moderators.
+   3) Repair: Examples of repair include a private written apology, acknowledgement of responsibility, and seeking clarification on expectations.
+2) Temporarily Limited Activities
+   1) Event: A repeated incidence of a violation that previously resulted in a warning, or the first incidence of a more serious violation.
+   2) Consequence: A private, written warning with a time-limited cooldown period designed to underscore the seriousness of the situation and give the community members involved time to process the incident. The cooldown period may be limited to particular communication channels or interactions with particular community members.
+   3) Repair: Examples of repair may include making an apology, using the cooldown period to reflect on actions and impact, and being thoughtful about re-entering community spaces after the period is over.
+3) Temporary Suspension
+   1) Event: A pattern of repeated violation which the Community Moderators have tried to address with warnings, or a single serious violation.
+   2) Consequence: A private written warning with conditions for return from suspension. In general, temporary suspensions give the person being suspended time to reflect upon their behavior and possible corrective actions.
+   3) Repair: Examples of repair include respecting the spirit of the suspension, meeting the specified conditions for return, and being thoughtful about how to reintegrate with the community when the suspension is lifted.
+4) Permanent Ban
+   1) Event: A pattern of repeated code of conduct violations that other steps on the ladder have failed to resolve, or a violation so serious that the Community Moderators determine there is no way to keep the community safe with this person as a member.
+   2) Consequence: Access to all community spaces, tools, and communication channels is removed. In general, permanent bans should be rarely used, should have strong reasoning behind them, and should only be resorted to if working through other remedies has failed to change the behavior.
+   3) Repair: There is no possible repair in cases of this severity.
+
+This enforcement ladder is intended as a guideline. It does not limit the ability of Community Managers to use their discretion and judgment, in keeping with the best interests of our community.
+
+
+## Scope
+
+This Code of Conduct applies within all community spaces, and also applies when an individual is officially representing the community in public or other spaces. Examples of representing our community include using an official email address, posting via an official social media account, or acting as an appointed representative at an online or offline event.
+
+
+## Attribution
+
+This Code of Conduct is adapted from the Contributor Covenant, version 3.0, permanently available at [https://www.contributor-covenant.org/version/3/0/](https://www.contributor-covenant.org/version/3/0/).
+
+Contributor Covenant is stewarded by the Organization for Ethical Source and licensed under CC BY-SA 4.0. To view a copy of this license, visit [https://creativecommons.org/licenses/by-sa/4.0/](https://creativecommons.org/licenses/by-sa/4.0/)
+
+For answers to common questions about Contributor Covenant, see the FAQ at [https://www.contributor-covenant.org/faq](https://www.contributor-covenant.org/faq). Translations are provided at [https://www.contributor-covenant.org/translations](https://www.contributor-covenant.org/translations). Additional enforcement and community guideline resources can be found at [https://www.contributor-covenant.org/resources](https://www.contributor-covenant.org/resources). The enforcement ladder was inspired by the work of [Mozilla’s code of conduct team](https://github.com/mozilla/inclusion).

getting-started.md

@@ -9,11 +9,12 @@ using the chat, and getting involved in governance.
 
 ## 1. Become a member
 
-Membership is a **sliding-scale contribution of $10–20/month** through Open
-Collective. What you pay is up to you.
+Membership is a **sliding-scale contribution starting at $5/month** through
+Open Collective (the suggested level is $15 — pay what fits your
+circumstances).
 
 1. Go to [opencollective.com/inference-cooperative](https://opencollective.com/inference-cooperative).
-2. Choose a contribution amount in the $10–20 range and subscribe.
+2. Choose a contribution amount ($5 minimum) and subscribe.
 3. After you contribute, you'll land on a "check your inbox" page.
 
 **Within a few minutes, you'll get a welcome email** with a link to set up your
@@ -43,7 +44,19 @@ with the account you created in step 1.
   renewable energy). See the [model list](models.md) for the full list.
 - **Web search** is enabled by default (self-hosted, no external dependency).
 - **File uploads** work out of the box — ask the chat about a document you attach.
-- Your usage draws from your monthly allowance; you can see it on the
+- **External tool servers.** The chat can connect to external tool services —
+  things that let the AI do like search marketplaces, query other services,
+  or pull in specialized data. Members can add their own **OpenAPI** services:
+  go to Settings → Services → Integrations → External Tool Servers, click
+  add, and enter the service's URL (it must publish an OpenAPI spec). In a
+  conversation, pick the tool server from the tools menu near the message box
+  and ask away. Please review what a third-party tool service does with your
+  data before connecting it.
+  **MCP-protocol servers** are also supported, but those are added by admins
+  and appear for everyone — if there's an MCP service you'd like available,
+  ask in #general.
+
+Your usage draws from your monthly allowance; you can see it on the 
 [Member Dashboard](https://dashboard.inference.coop).
 
 If the chat ever says your balance is out, that's the allowance, not an error —
@@ -55,6 +68,45 @@ You don't just use the co-op; you help run it. Decisions about models, pricing,
 privacy, and direction happen on our **Loomio forum**:
 
 - **[forum.inference.coop](https://forum.inference.coop)** — where members discuss and decide.
+- **[matrix.inference.coop](https://matrix.inference.coop)** — our Matrix chat server. Log in
+  with your co-op account (Cloudron SSO); your Matrix ID is `@username:inference.coop`.
+  Every member is invited to the **Inference Cooperative** space automatically — check your
+  invites on first login.
+
+  **Using it from any Matrix client** — the server speaks the standard Matrix protocol,
+  so you can connect from any client:
+
+  - **Element** (web, desktop, iOS, Android): on the sign-in screen, click *Edit* next to
+    "Homeserver" and enter `https://matrix.inference.coop`, then sign in with your co-op
+    account. (On [app.element.io](https://app.element.io) or the desktop/mobile apps alike.)
+    **Note:** the new **Element X** apps (iOS/Android/macOS) are *not* currently supported —
+    they only work with the newer Matrix Authentication Service, which this server doesn't
+    run yet. Use the classic Element apps (Element Web / Element Desktop / "Element" on the
+    app stores) or another client below.
+  - **FluffyChat, Cinny, SchildiChat** or any other client: look for the "custom homeserver"
+    / "other server" option in the client's login screen and enter the same address.
+  - Your co-op account and your existing Matrix account on another server (e.g.
+    matrix.org or a personal homeserver) are separate identities. If you'd
+    rather use an existing account for co-op rooms, set it on your
+    [dashboard](https://dashboard.inference.coop) under **Matrix chat** (one
+    extra account) — invitations will go there instead. Both work either way.
+
+  **Members-only, readable history.** The space is invite-only and unencrypted
+  so every member can read the full history (including messages from before
+  they joined). Invites are restricted to admins — so while any member is
+  welcome to bring a collaborator or guest, an admin sends the invite rather
+  than members handing the space to outsiders directly.
+
+- **#inferencebot-updates** — an automated feed inside the space where the
+  co-op's stewarding bot posts daily updates on infrastructure work: model
+  changes, gateway upgrades, maintenance, and outages. Posts are anonymized
+  (never any member-identifying details) and only the bot and admins can
+  write — it's a read-and-follow channel. Questions go to the main space
+  room.
+
+- **#design** — an open member room for co-op design discussions: website,
+  docs, dashboard, branding. All members can post; pull up a chair.
+
 - See the [Charter](charter.md) for how governance is structured.
 - See [Open questions](open-questions.md) for the decisions currently on the table.
 
@@ -71,8 +123,9 @@ and the "Contributing" section for how to propose changes through
 
 ## Your allowance and credits
 
-Membership includes **$15 of usage credit each month**, shared between chat and
-API. It's a starting value, not a hard rule:
+Membership includes **$15 of usage credit each month** (same for every member,
+regardless of what you pay), shared between chat and API. It's a starting
+value, not a hard rule:
 
 - The allowance resets each month on your personal billing date (the day your
   membership payment recurs) — not on a fixed calendar day.

infrastructure.md

@@ -6,16 +6,21 @@ and contributors who want to work on it.
 ## The big picture
 
 Members reach the co-op through two front doors: the **chat** (Open WebUI) and
-the **API** (the LiteLLM gateway). Both route through a single gateway to cloud
-LLM providers running inside **TEE-protected enclaves** (Tinfoil), so inference
-is private end-to-end. A thin layer of custom middleware — the member portal —
-ties Open Collective membership to Cloudron accounts and LiteLLM keys.
+the **API** (the LiteLLM gateway). Both route through a single gateway to
+multiple LLM providers — so members choose what they value for each task:
+architecturally private inference in **TEE-protected enclaves** (Tinfoil),
+100% renewable energy (GreenPT), or publicly developed sovereign models
+(PublicAI). A thin layer of custom middleware — the member portal — ties Open
+Collective membership to Cloudron accounts and LiteLLM keys.
 
 ```
-Members ──> Open WebUI (chat) ─┐
-                               ├──> LiteLLM gateway ──> Tinfoil (TEE) ──> models
-Members ──> your own tools ────┘
-                          (API)
+                                              ┌─> Tinfoil (TEE)      🔒 private
+Members ──> Open WebUI (chat) ─┐              │
+                               ├──> LiteLLM ──┼─> GreenPT (renewable) 🌱 green
+Members ──> your own tools ────┘    gateway   │
+                          (API)     (keys,    └─> PublicAI (open)     📖 public
+                                    metering,
+                                    routing)
 ```
 
 The whole stack runs on [Cloudron](https://cloudron.io), which handles hosting,
@@ -32,6 +37,7 @@ single sign-on, and per-app isolation.
 | **Admin Panel** | Admin-only member overview, spend, balance management | panel.inference.coop | [code/admin-panel](https://git.inference.coop/code/admin-panel) |
 | **SearXNG** | Self-hosted web search (feeds the chat's search) | search.inference.coop | — |
 | **Loomio** | Member governance | forum.inference.coop | — |
+| **Matrix (Synapse)** | Member chat server (federated; SSO login via Cloudron) | matrix.inference.coop | — |
 | **Gitea** | Git hosting (code + docs) | git.inference.coop | — |
 | **Surfer** | Static hosting (landing page, thanks page) | inference.coop | [co-op/website](https://git.inference.coop/co-op/website) |
 | **Listmonk** | Member newsletter (auto-synced from membership) | newsletter.inference.coop | — |
@@ -41,6 +47,45 @@ single sign-on, and per-app isolation.
 Open Collective (billing and fiscal sponsorship) is the one external service in
 the flow — see [opencollective.com/inference-cooperative](https://opencollective.com/inference-cooperative).
 
+## Matrix
+
+Members get a federated Matrix account on our self-hosted Synapse
+(matrix.inference.coop, user IDs `@username:inference.coop`) using their
+Cloudron SSO login. The portal invites every active member — and Nathan's
+federated account — to the private **Inference Cooperative** Space (with a
+**General** room) on every membership sync, so new members land in the space
+automatically. Invites honor rate limits; external/federated members can be
+added via the portal's `MATRIX_EXTRA_MXIDS` env.
+
+Federation is enabled (delegated via `.well-known/matrix/server` on the bare
+domain, port 443), so members can also join from any homeserver they already
+use. The `@inference-bot:inference.coop` admin account (used by the portal
+for invites) has no password — token lives in the portal env.
+
+## How the apps run themselves
+
+The portal and gateway are self-maintaining: their recurring housekeeping is
+built into the apps as scheduled tasks, not run from any member's or operator's
+personal machine.
+
+- **Member portal** — two scheduled jobs (Cloudron scheduler):
+  - *Membership sweep* (nightly, 3am) — reconciles members against the live
+    Open Collective list: provisions new members who signed up while a webhook
+    was missed, deactivates lapsed members, and syncs Loomio + Matrix
+    membership. A missed webhook self-heals within 24 hours.
+  - *Docs knowledge refresh* (nightly, 3:30am) — pulls this documentation from
+    the public Git repo and updates the shared knowledge base behind the chat's
+    models, so answers grounded in the docs stay current. Changes to the docs
+    appear in the chat within a day, no manual step.
+- **Gateway** — an *audio keep-alive* (every 10 minutes) sends a tiny text-to-
+  speech ping to the private enclave so voice mode responds quickly even after
+  long quiet periods, without compromising the end-to-end encryption model.
+
+Scheduled tasks are declared in each app's `CloudronManifest.json` (see the
+`code/` repos) and survive redeploys. If a task fails, it shows up in the
+app's logs on the admin panel; the portal also exposes a manual trigger for
+the membership sweep.
+
 ## How membership is wired
 
 Membership flows through the member portal, which is the single source of truth
@@ -158,49 +203,3 @@ through it; the other providers are called directly.
 Maintaining the co-op's infrastructure — rotating Cloudron tokens, editing the
 portal's environment, and troubleshooting the provisioning pipeline — is
 documented in the [operator runbook](operator-token-runbook.md).
-
-## Gateway version and security update policy
-
-The LiteLLM gateway is pinned to an **exact upstream tag** in
-[`code/litellm`](https://git.inference.coop/code/litellm) (currently
-`v1.84.0`). Two reasons:
-
-1. **CVE fix line.** A member security review (Oct 2026) found the prior pin
-   (`main-v1.74.0-stable`) sat below the fix line for two published
-   vulnerabilities: CVE-2026-35029 (authorization bypass on
-   `/config/update`, fixed in 1.83.0, with documented in-the-wild probing)
-   and CVE-2026-59822 (MCP session auth bypass, fixed in 1.84.0, listed in
-   the CISA Known Exploited Vulnerabilities catalog). `v1.84.0` is at or
-   above both fix lines.
-2. **Floating-tag drift.** `main-v1.74.0-stable` is a *floating* tag — the
-   registry silently moved it to a newer build. A rebuild intended as a
-   no-op therefore pulled different bits and triggered a full schema
-   migration, which is how the 2026-10-02 outage happened (see below).
-
-Rule: **never pin a floating tag** (`main-*` / `latest`); always the exact
-version tag. When upgrading, expect the first boot after the upgrade to take
-10–15 minutes (prisma migration with internal retries) — plan the restart
-window accordingly.
-
-CORS: the gateway answers browser preflights only for
-`https://chat.inference.coop` (via LiteLLM's native
-`LITELLM_CORS_ORIGINS`). The old `LITELLM_CORS_ALLOWED_ORIGINS` name
-(our v1.74.0-era sed-patch variable) is dead — v1.84.0 reads the native
-name only.
-
-## Incident log
-
-**2026-10-02 — gateway outage after security-upgrade rebuild.** A Cloudron
-update triggered by the CVE report rebuilt the app image; the floating
-`main-v1.74.0-stable` tag had moved to newer bits (v1.84.0-era), so the
-rebuild changed the running version and kicked off a full prisma DB
-migration that takes 10–15 minutes per boot with internal timeouts/retries.
-The gateway was down ~50 minutes (04:50–05:34 UTC); no data loss. Repairs:
-version pinned to the exact tag in the repo (PR
-[code/litellm#1](https://git.inference.coop/code/litellm/pulls/1) — pending
-merge), `LITELLM_CORS_ORIGINS` set as a Cloudron env var (the upgrade had
-silently reverted CORS to `*`), packaging synced to mirror the live
-deployment. Also during the incident: the domain's authoritative
-nameservers (yoursrs.com) were intermittently unreachable, briefly failing
-resolution of some hostnames (git, portal) — transient registrar-side
-issue, self-recovered, no records were wrong.

models.md

@@ -37,51 +37,58 @@ that **you choose** which axis matters more for a given task.
 
 **How to pick, quick guide:**
 
-- **Everyday chat and drafting** → a fast model: `tinfoil/glm-5-3-flash`,
-  `greenpt/glm-5.3-flash`, or `greenpt/green-l`. These handle the bulk of what
-  people use chat for, at a fraction of flagship cost.
-- **Hard reasoning, coding, agentic work** → a flagship: `tinfoil/glm-5-3` or
-  `greenpt/glm-5.3` (same underlying model, different provider trade-off),
-  or `tinfoil/deepseek-v4-1-flash` for long documents and tool-driven tasks.
-- **Images in, text out (vision)** → `tinfoil/glm-5-3-flash`,
-  `tinfoil/deepseek-v4-1-flash`, or the Apertus models — see the ✅ in the
-  table below.
+- **Default** → `greenpt/deepseek-v4.1-flash`: DeepSeek's efficient multimodal
+  reasoning model on renewable energy, and the model the chat starts on. For the
+  TEE-protected (private) version of the same model, use `tinfoil/deepseek-v4-1-flash`.
+- **Everyday chat and drafting** → a fast model: `greenpt/glm-5.3-flash`.
+  These handle the bulk of what people use chat for, at a fraction of flagship
+  cost.
+- **Hard reasoning, coding, agentic work** → a flagship: `greenpt/glm-5.3`
+  (renewable) or `tinfoil/glm-5.3` (TEE-protected) — the GLM flagship on the
+  provider of your choice — or `tinfoil/deepseek-v4-1-flash` for long documents
+  and tool-driven tasks.
+- **Images in, text out (vision)** → `tinfoil/deepseek-v4-1-flash` or the
+  Apertus models — see the ✅ in the table below.
 - **Cheap and cheerful** → `tinfoil/gpt-oss-120b` or `greenpt/glm-5.3-flash`.
 - **Model origins matter to you** → the Apertus models (publicly developed;
   see below).
 
 ## Current models
 
-Pricing is per 1 million tokens, input / output (what the co-op pays the
-provider — your own cost is your monthly allowance, not per-token billing).
-**Vision** means the model accepts images as input (screenshots, photos,
-documents to reason about) — all models output text. None of our current
-models generate images.
+Pricing is per 1 million tokens, input / output / **cached input** (what the
+co-op pays the provider — your own cost is your monthly allowance, not
+per-token billing). The cached-input rate applies when a model reuses a
+shared prompt prefix (multi-turn conversations, agent loops); most providers
+charge a steep discount for it. Models with `—` don't offer a distinct
+cache-read price. **Vision** means the model accepts images as input
+(screenshots, photos, documents to reason about) — all models output text.
+None of our current models generate images.
 
-| Model | Provider | Privacy | Green | Vision | Context | Pricing (in / out) | Notes |
+The emoji in the model name marks its **value tier** (the same icons used in the chat picker):
+
+- 🔒 **Private** — Tinfoil: architecturally private (TEE enclaves)
+- 🌱 **Green** — GreenPT: 100% renewable energy
+- 📖 **Public** — PublicAI: publicly developed, sovereign open models
+
+| Model | Provider | Privacy | Green | Vision | Context | Pricing (in / out / cached) | Notes |
 |---|---|---|---|---|---|---|---|
-| `tinfoil/glm-5-3-flash` | Tinfoil | architectural | undisclosed | ✅ | 1M | $0.40 / $1.25 | Fast multimodal MoE; great everyday default with image input. |
-| `tinfoil/glm-5-3` | Tinfoil | architectural | undisclosed | — | 1M | $1.80 / $5.75 | GLM flagship; strongest agentic model, private tier. |
-| `tinfoil/deepseek-v4-1-flash` | Tinfoil | architectural | undisclosed | ✅ | 1M | $0.65 / $1.45 | Efficient MoE, image input, tool calling; great for long docs and agents. |
-| `tinfoil/gpt-oss-120b` | Tinfoil | architectural | undisclosed | — | 131K | $0.15 / $0.60 | Lightweight open-weight reasoning; cheapest private tier. |
-| `tinfoil/kimi-k3` | Tinfoil | architectural | undisclosed | ✅ (image + video) | 262K | $4.00 / $20.00 | Moonshot's flagship multimodal MoE; premium tier. |
-| `greenpt/green-r` | GreenPT | policy | 100% renewable | — | 128K | $0.35 / $0.95 | Reasoning-focused, renewable energy. |
-| `greenpt/green-l` | GreenPT | policy | 100% renewable | — | 128K | $0.25 / $0.80 | Lightweight, renewable energy. |
-| `greenpt/glm-5.3-flash` | GreenPT | policy | 100% renewable | — | 1M | $0.11 / $0.44 | Fast GLM model, renewable energy. |
-| `greenpt/glm-5.3` | GreenPT | policy | 100% renewable | — | 1M | $1.10 / $4.40 | GLM flagship — strongest agentic model in the green tier. |
-| `publicai/apertus-v1.5-8b` | PublicAI | policy | undisclosed | ✅ | 262K | $0.10 / $0.20 | Fully open sovereign model, small/fast, image understanding. |
-| `publicai/apertus-v1.5-70b` | PublicAI | policy | undisclosed | ✅ | 262K | $0.82 / $2.92 | Fully open sovereign model, large/capable, image understanding. |
+| `🌱 greenpt/deepseek-v4.1-flash` | GreenPT | policy | 100% renewable | ✅ | 1M | $0.22 / $1.10 / $0.011 | **Default.** DeepSeek's multimodal reasoning model, renewable energy; TEE twin below. |
+| `🔒 tinfoil/deepseek-v4-1-flash` | Tinfoil | architectural | undisclosed | ✅ | 1M | $0.65 / $1.45 / $0.13 | TEE-protected version of the default; image input, tool calling, long docs/agents. |
+| `🔒 tinfoil/glm-5.3` | Tinfoil | architectural | undisclosed | — | 1M | $1.80 / $5.75 / $0.45 | GLM flagship, TEE-protected; strongest private-tier model for agentic coding and long-horizon tasks. |
+| `🔒 tinfoil/gpt-oss-120b` | Tinfoil | architectural | undisclosed | — | 131K | $0.15 / $0.60 / — | Lightweight open-weight reasoning; cheapest private tier. |
+| `🌱 greenpt/glm-5.3-flash` | GreenPT | policy | 100% renewable | — | 1M | $0.11 / $0.44 / $0.022 | Fast GLM model, renewable energy. |
+| `🌱 greenpt/glm-5.3` | GreenPT | policy | 100% renewable | — | 1M | $1.10 / $4.40 / $0.275 | GLM flagship — strongest agentic model in the green tier. |
+| `📖 publicai/apertus-v1.5-8b` | PublicAI | policy | undisclosed | ✅ | 262K | $0.10 / $0.20 / — | Fully open sovereign model, small/fast, image understanding. |
+| `📖 publicai/apertus-v1.5-70b` | PublicAI | policy | undisclosed | ✅ | 262K | $0.82 / $2.92 / — | Fully open sovereign model, large/capable, image understanding. |
 
 Vision is verified working through the co-op gateway (base64 image input via
 `/v1/chat/completions`, standard OpenAI format). In the chat UI, just attach
 an image to your message while using a ✅ model.
 
-**Same model, two providers:** `glm-5-3` (Tinfoil) and `glm-5.3` (GreenPT)
-are the same Z.ai model offered by two providers — Tinfoil's is
-architecturally private at $1.80/$5.75; GreenPT's is 100% renewable at
-$1.10/$4.40. That price/privacy trade-off in a single comparison is the
-co-op's whole idea in miniature: you pick which axis matters for the task
-at hand.
+**Same model, two providers:** `glm-5.3` (Z.ai's GLM flagship) is offered both
+on GreenPT (renewable, $1.10/$4.40) and on Tinfoil (TEE-protected, $1.80/$5.75)
+— pick the axis that matters to you. The fast `glm-5.3-flash` variant is
+GreenPT-only (Tinfoil deprecated their flash variant in October 2026).
 
 ### Audio models
 
@@ -92,8 +99,8 @@ model picker to avoid confusion.
 
 | Model | Provider | Use | Pricing |
 |---|---|---|---|
-| `tinfoil/whisper-large-v3-turbo` | Tinfoil | Speech-to-text | $0.05 / 1M input tokens |
-| `tinfoil/voxtral-tts` | Tinfoil | Text-to-speech | listed $0 (verify on invoice) |
+| `🔒 tinfoil/whisper-large-v3-turbo` | Tinfoil | Speech-to-text | $0.05 / 1M input tokens |
+| `🔒 tinfoil/voxtral-tts` | Tinfoil | Text-to-speech | listed $0 (verify on invoice) |
 
 Both run inside Tinfoil's enclaves, so voice data gets the same architectural
 privacy as the private chat models. TTS voices available: `neutral_female`,
@@ -118,7 +125,7 @@ curl https://gateway.inference.coop/v1/audio/speech \
 curl https://gateway.inference.coop/v1/chat/completions \
   -H "Authorization: Bearer ***" \
   -H "Content-Type: application/json" \
-  -d '{"model": "tinfoil/glm-5-3-flash", "messages": [{"role": "user", "content": [
+  -d '{"model": "tinfoil/deepseek-v4-1-flash", "messages": [{"role": "user", "content": [
         {"type": "text", "text": "What is in this image?"},
         {"type": "image_url", "image_url": {"url": "data:image/png;base64,..."}}
       ]}]}'
@@ -147,6 +154,9 @@ window, improved tool use, and instruction-following. It's the *publicly
 developed* counterpart to the private (Tinfoil) and renewable (GreenPT)
 offerings — sovereignty as a third axis of member choice.
 
+For more information on open-source AI and the Apertus models, see the
+[European Open Source AI Index](https://osai-index.eu/database/).
+
 *Source: [apertus-ai.org](https://www.apertus-ai.org/) and the
 [Swiss AI Hugging Face](https://huggingface.co/swiss-ai) model cards.*
 

open-questions.md

@@ -48,7 +48,7 @@ Currently chat history is stored on co-op servers. We could potentially switch t
 
 ### How should pricing account for unequal usage?
 
-Members currently pay a flat $15/month for a $15/month credit budget. But usage is unequal — some members use far more tokens than others.
+Members currently pay dues on a sliding scale (from $5/month) with a flat $15/month credit budget. But usage is unequal — some members use far more tokens than others.
 
 - **Flat (current):** simple, predictable, but heavy users subsidize light users (or vice versa).
 - **Usage-based:** pay for what you use, but unpredictable and may discourage experimentation.

operator-token-runbook.md

@@ -39,6 +39,47 @@ copy, the portal's Cloudron calls start returning `401` — which breaks
 provisioning (new members can't be created) and the member dashboard (its
 usage/keys data is resolved through the portal's Cloudron calls).
 
+## Chat image: spaCy model for document parsing (EPUB/DOCX)
+
+Open WebUI's document parser (`unstructured`) lazily downloads the spaCy model
+`en_core_web_sm` on first EPUB/DOCX parse — but the app directory is read-only
+under Cloudron, so that install always fails ("Errno 30 Read-only file
+system"). Fixed 2026-10-14 (issue #20) by pre-installing the model into
+persistent storage:
+
+- `/app/data/spacy_model/` holds the unpacked wheel
+  (SHA-verified `en_core_web_sm-3.8.0-py3-none-any.whl` from the pinned URL in
+  `unstructured/nlp/tokenize.py`).
+- App env has `PYTHONPATH=/app/data/spacy_model` so `import en_core_web_sm`
+  resolves and the lazy download never triggers.
+
+**Restore caveat:** a backup restore from before 2026-10-14 will NOT contain
+the model dir — re-create it (download the pinned wheel, unzip into
+`/app/data/spacy_model/`, verify `spacy.load("en_core_web_sm")` works in the
+container). The `PYTHONPATH` env survives restores (it's in app config).
+
+## Scheduled tasks (scheduler addon)
+
+The portal and gateway run their own housekeeping via the Cloudron scheduler
+addon, declared in each app's `CloudronManifest.json` under `addons.scheduler`:
+
+- **portal**: `membership_sweep` (nightly 3am, `/app/code/sweep.sh` →
+  `POST /admin/sweep` with the `WEBHOOK_TOKEN` header) and `rag_refresh`
+  (nightly 3:30am, `/app/code/rag_refresh.py` — pulls docs from the Gitea raw
+  API and refreshes the chat knowledge base; needs `OWUI_API_KEY` +
+  `DOCS_KNOWLEDGE_ID` in the app env).
+- **gateway**: `audio_keepalive` (every 10 minutes, `/app/code/audio_keepalive.py`
+  — pings the Tinfoil audio models locally to avoid the ~24s TEE cold-start;
+  reads the master key from `/app/data/.master_key`, which `start.sh` writes —
+  the env var `LITELLM_MASTER_KEY` is only exported into the litellm process).
+
+**After any manifest change, verify the scheduler survived the deploy:** the
+build log must show `setupAddons: setting up addon scheduler with options
+{...}` listing your task(s), and each script must succeed when run manually
+inside the container (`cloudron exec --app <id> -- <command>`). The scheduler
+has historically gone missing from the manifest during edits — a deploy without
+the setupAddons line means nightly reconciliation is NOT running.
+
 ## Custom apps have no env-var UI
 
 The member portal is a *custom* app (packaged by us), not an App Store app.

privacy-policy.md

@@ -1,11 +1,11 @@
 # Privacy Policy
 
-**Last updated:** September 10, 2026
+**Last updated:** October 6, 2026
 
 ## In plain language
 
 - We collect only what we need: your email, name, and basic usage data.
-- **Your AI conversations are encrypted** — even we can't read them at the inference step.
+- We offer a **changing variety of models with different privacy and value affordances** — some run in encrypted enclaves we cannot read, others differ. **You are responsible for assessing each model's properties and picking the one that fits your needs.**
 - We **do** store your chat history on our server (so you can revisit it). We promise not to read it, but this is a promise, not a technical guarantee.
 - We never train on your data, and we never sell it.
 - You can export or delete your data at any time.
@@ -26,13 +26,20 @@ The Inference Cooperative is a member-governed project. We are **not** an ad-sup
 - **Content:** your prompts and the AI's responses (stored in your chat history).
 - **Billing data:** handled by Open Collective — we do not see full payment details.
 
-## 3. What we *can't* see (architectural privacy)
+## 3. Privacy depends on the model you choose
 
-Inference runs inside **encrypted enclaves** (TEEs). Your model inputs and outputs are encrypted end-to-end, so **even our own infrastructure cannot read them at the inference step.** This is verifiable through remote attestation — it's a property of the system, not a promise.
+We serve a **changing catalog of models from multiple providers, and they do not all offer the same privacy**. Models differ in their affordances — some run inference inside **encrypted enclaves** (TEEs) where inputs and outputs are not readable in plaintext at the inference step; others are selected for renewable energy, openness, or cost rather than architectural privacy. The set of available models, and their properties, will change as members decide.
+
+**You are responsible for assessing each model's privacy and value properties and choosing the one that fits your needs.** As a rule of thumb:
+
+- Some models run inference in encrypted enclaves, verifiable through remote attestation — a property of the system, not a promise.
+- Other models are processed in the clear under their provider's own terms and data-processing agreement.
+
+We never read or sell your data regardless of model — but the *architectural* guarantee applies only to models that offer it. Check the current model catalog and each provider's terms before relying on a particular model for sensitive material.
 
 ## 4. What we *can* see (an honest caveat)
 
-Your **chat history is stored on our server** so you can revisit past conversations. Unlike the inference step, stored chat history is **not** encrypted in a way that prevents us from technically reading it.
+Your **chat history is stored on our server** so you can revisit past conversations. Stored chat history is **not** encrypted in a way that prevents us from technically reading it, regardless of which model generated it.
 
 We commit not to read it. But this is a **policy commitment**, not an architectural guarantee. We're transparent about this distinction because it matters.
 
@@ -52,7 +59,8 @@ Web search runs through our self-hosted search instance. Search queries are forw
 
 ## 7. Third parties
 
-- **Tinfoil** — provides encrypted inference (cannot read your content).
+The models we serve are provided by third parties that change over time, each with its own terms and privacy posture. We never sell your data, but when you use a model, that model's provider processes your inputs under its own terms and data-processing agreement — some in encrypted enclaves, some in the clear. Review each provider's terms before relying on it for sensitive material. Our current providers are listed in the model catalog.
+
 - **Open Collective** — handles billing and membership (their own privacy policy applies).
 - **Cloudron** — our self-hosted platform; no third-party cloud provider.
 - **Search engines** — receive your search queries (see §5).

terms-of-service.md

@@ -1,15 +1,15 @@
 # Terms of Service
 
-**Last updated:** September 10, 2026
+**Last updated:** October 6, 2026
 
 ## In plain language
 
 - You are a **member**, not a customer. You help govern this project.
-- We provide **private AI chat** through open models, protected by encryption.
+- We provide AI chat and API access through open models, with **a variety of privacy and value options** (some models run in encrypted enclaves; others differ — see §3).
 - Your prompts and the AI's outputs are yours to keep.
 - We don't train on your data, and we don't sell it.
 - AI can be wrong. Use your judgment.
-- If you misuse the service, we may remove you (per our Charter).
+- If you misuse the service, we may remove you (per our Charter) — and you are responsible for what you do with it (§4).
 - Our liability is limited to what you've paid in dues.
 
 The full terms are below. If anything is unclear, write to info@inference.coop.
@@ -18,13 +18,14 @@ The full terms are below. If anything is unclear, write to info@inference.coop.
 
 ## 1. Who we are
 
-The **Inference Cooperative** ("we", "us") is a member-governed project providing private AI inference. We are fiscally sponsored by **Metagov**, a nonprofit that provides our financial and legal services.
+The **Inference Cooperative** ("we", "us") is a member-governed project providing AI inference. We are fiscally sponsored by **Metagov**, a nonprofit that provides our financial and legal structure.
 
 When you join, you become a **member** — someone with a voice in how the project is run — not a customer of a vendor.
 
 ## 2. Membership
 
-- Membership is through **Open Collective**, where you pay dues on a sliding scale.
+- Membership is through **Open Collective**, where you pay dues on a sliding
+  scale (currently $5/month minimum).
 - You must be **18 or older** to join.
 - Membership is governed by our [Charter](charter.md), including our Code of Conduct.
 - We may suspend or remove membership for Code of Conduct violations or non-payment, as described in the Charter.
@@ -33,25 +34,34 @@ When you join, you become a **member** — someone with a voice in how the proje
 
 We provide:
 
-- **Private AI chat** through open-source models, served through encrypted (TEE-protected) infrastructure.
+- **AI chat and a developer API** through a changing catalog of open models from multiple providers. You choose per task not just *which model*, but *which affordances it offers* — models differ in privacy architecture, energy source, openness, capability, and cost. Some run inference inside encrypted enclaves; others do not. Some run on renewable energy; others do not. The catalog changes as members decide, and the specific models and providers available will evolve.
 - **Web search** and **file uploads** within the chat interface.
 - **Governance** — a seat in decisions about models, pricing, and direction.
 
+Models are **not interchangeable in their affordances**. Each model has its own privacy, sustainability, and openness properties, and the set of available models changes over time. You are **responsible for assessing** which model fits your needs for a given task — in particular its privacy properties — before relying on it. See our [Privacy Policy](privacy-policy.md) for what this means in practice.
+
 The service is provided **"as is"** and may change as the project evolves. We do not guarantee uptime or specific performance at this stage.
 
 ## 4. Acceptable use
 
-You agree not to:
+You agree not to use the service to:
 
-- Use the service for anything illegal.
-- Harass, abuse, or harm others.
-- Attempt to circumvent usage limits or the privacy architecture.
-- Share your account credentials or resell access.
-- Use the service to generate content that violates our [Code of Conduct](charter.md).
+- Violate any law or regulation.
+- Generate, distribute, or facilitate **illegal, harmful, abusive, or discriminatory content** — including content that sexualizes minors, defrauds, incites violence, or harasses others.
+- Create **deepfakes, impersonations, or deceptive media** of real people without their consent.
+- Process **regulated data** — including protected health information (e.g. HIPAA), payment-card data, or other categories that require a separate legal agreement — unless we have agreed to that in writing.
+- Submit **special-category personal data** under GDPR Article 9 (health, ethnicity, political views, religion, biometrics, etc.) without a written agreement.
+- Use the service in or for the benefit of **embargoed or sanctioned jurisdictions or persons**, or otherwise in violation of **export-control or sanctions law**.
+- Use AI outputs as the **sole basis for consequential decisions** — legal, medical, financial, employment, housing, or safety-critical — without appropriate human review and professional oversight.
+- Use the service for **high-risk or fail-safe** applications (e.g. critical infrastructure, life-support, weapons systems).
+- Attempt to circumvent usage limits, the privacy architecture, or rate limits.
+- Share your account credentials, or resell or redistribute access to the service.
+
+You are **responsible for what you submit and what you do with AI outputs**, and you must have the rights needed to submit your content.
 
 ## 5. Usage limits
 
-- Membership includes a **monthly credit budget** (currently $15 of usage).
+- Membership includes a **monthly credit budget** (currently $15 of usage, the same for every member regardless of what you pay).
 - Members may also purchase **credit packs**: non-expiring credits drawn only
   after the monthly budget is exhausted. Credits do not expire and carry over
   from month to month.
@@ -67,7 +77,7 @@ You agree not to:
 
 ## 7. Privacy
 
-Your privacy is a core value, not an afterthought. Inference runs in encrypted enclaves so that even our own infrastructure cannot read your model inputs and outputs at the inference step. Details are in the [Privacy Policy](privacy-policy.md).
+Privacy is a core value, but it is **not uniform across the service** — and the set of available models changes over time. Models differ in their privacy affordances: some run inference in encrypted enclaves so inputs and outputs are not readable in plaintext at the inference step, while others are selected for renewable energy or openness rather than architectural privacy. **You are responsible for assessing each model's privacy properties and choosing one that matches your needs.** See the [Privacy Policy](privacy-policy.md) for the current picture.
 
 ## 8. Termination
 
@@ -80,11 +90,12 @@ Your privacy is a core value, not an afterthought. Inference runs in encrypted e
 - Decisions are made through **Loomio** and governed by the [Charter](charter.md).
 - During the pilot phase, the General Manager holds final discretion; this transitions to full member governance as the project grows.
 
-## 10. Disclaimers and liability
+## 10. Disclaimers, liability, and indemnity
 
-- **AI outputs may be inaccurate or inappropriate.** We provide no warranty of correctness. Use your judgment.
+- **AI outputs may be inaccurate, biased, or inappropriate.** We provide no warranty of correctness. Use your judgment, and do not rely on outputs as a sole source of truth or as a substitute for professional advice.
 - To the maximum extent permitted by law, our liability is limited to the amount of dues you have paid.
 - Members are not personally liable for the project's obligations.
+- **You agree to indemnify and hold harmless** the Inference Cooperative, Metagov, and their officers, directors, employees, and agents from any claims, losses, liabilities, damages, costs, and expenses (including reasonable legal fees) arising from **your use of the service, your content, your violation of law or third-party rights, or your violation of these Terms**. In plain terms: if what you do with the service causes a legal problem, it is your responsibility, not the co-op's or Metagov's.
 
 ## 11. Changes to these terms