One-time "data leaves your device" acknowledgment flag for hosted (non-local) AI providers, persisted like consent_acknowledged so the banner doesn't nag on every use. serde(default) so it's false for any settings.json written before this field existed.