I've been thinking a lot about what it would look like to support verifiable/auditable guarantees around data exfil/capture for this class of use.
I don't think it's enough to pinky-promise that you aren't sending a dragnet of video with facial capture etc back to the mothership, I think you really end up wanting auditable proof that nothing sensitive can leave the robot or at the very least a no-logging hot-path inference loop (e.g. apple's confidential compute).
I don't think it's enough to pinky-promise that you aren't sending a dragnet of video with facial capture etc back to the mothership, I think you really end up wanting auditable proof that nothing sensitive can leave the robot or at the very least a no-logging hot-path inference loop (e.g. apple's confidential compute).