Add safe local compute and image transforms

Cortex_Preview.py

@@ -42,11 +42,16 @@ def build_preview_app(
     frontend_dist: Path | None = None,
     serve_frontend: bool = True,
     handoff_secret: str | None = None,
-    execution_profile: str | None = None,
+    execution_profile: str | None = "local",
     qualification: QualificationLifecycleConfig | None = None,
     execution_lifecycle: ExecutionLifecycle | None = None,
 ):
-    """Build the local web application without starting a server."""
+    """Build the local web application without starting a server.
+
+    Source and packaged launches select the checked-in ``local`` execution
+    profile. Pass ``execution_profile="disabled"`` for a chat-only preview or
+    inject a lifecycle explicitly for qualification tests.
+    """
     paths = AppPaths.from_data_dir(data_dir) if data_dir else AppPaths.for_current_user()
     execution_repository = ExecutionRepository(
         paths.execution_database,

README.md

@@ -16,6 +16,10 @@ the user's installed browser.
 - Persistent SQLite conversations and atomic JSON permanent memory.
 - Validated settings, local model inventory and pull progress, and optional
   translation.
+- Safe local computation for explicit arithmetic requests, with a user setting
+  to disable automatic verification.
+- User-requested PNG, JPEG, and WebP transformations with visible progress,
+  Stop, and a local result download.
 - Loopback-only API authentication with one-time native-window bootstrap tokens.
 - Windows one-folder packaging with the frontend bundled and no Node.js or
   system Python required at runtime.
@@ -40,6 +44,10 @@ packaging/               Windows PyInstaller build
 tests/                   headless Python and browser-facing tests
 ```
 
+The current open-source execution scope and remaining product stages are tracked in
+the [open-source execution plan](docs/OPEN_SOURCE_EXECUTION_PLAN.md). The larger
+capability ADR is technical reference; it is not a list of additional TODO items.
+
 The supported runtime is Windows. The embedded window uses the WebView2 Runtime,
 not Edge, Chrome, or their user profiles. User data remains in the existing location:
 `%APPDATA%\ChatLLM\ChatLLM-Assistant`. Legacy SQLite, JSON chat, permanent