Default installs optimize for "it worked on localhost." Shared UIs need a different checklist before you bookmark the link in a team wiki.
Defaults to change
Disable open registration. Force authentication. Bind to the intended interface. Turn off unnecessary tool execution. Set upload size limits. Clear or shorten retention of raw prompts if policy says so. Show a banner with classification: internal only.
Operational extras
Keep admin accounts separate from daily drivers. Patch the UI on a cadence you can recite. Back up its config beside model configs. Pair with network rules from your reverse proxy. Ground users in tutorials and methodology. When the UI fronts private corpora, revisit solutions. Hardware still caps concurrency—hardware.
Extra narrative
Walk through a malicious paste scenario in training: a prompt that asks for .env contents from a connected tool. If tools exist, start read-only. Mobile clients need their own story—microai-one-mobile. File issues via contact when you need outside help hardening a deployment.
The most dangerous local UI is the one everybody trusts because it is "only on the LAN."
Incident tabletop
Once a year, simulate a leaked LAN URL posted externally. Practice rotating secrets, checking logs, and notifying stakeholders. Confirm your banner text and ToS links still match reality. If contractors use personal browsers, decide explicitly whether that is allowed. Patch notes should mention security-relevant UI toggles in plain language.
Configuration inventory
Export UI settings to a file in git. Diff them during reviews. Disable experimental plugins by default. Ensure file upload scanning exists if users can send documents into RAG. Set session timeouts appropriate for shared desks. Ban embedding the admin password in launch scripts checked into public forks. When you open a port for a contractor, ticket an automatic close date. Align banners with legal-approved language. Re-test auth after each UI upgrade because toggles reset more often than people expect. Keep a paper copy of break-glass admin steps in the locked ops drawer.
Shared desktop realities
Reception or open-office kiosks need auto-lock and a cleaned browser profile. Disable extensions users can install casually. If the UI supports multiple model endpoints, hide experimental ones behind a role. Monitor failed logins. When someone leaves, remove them the same day. Put the secure defaults checklist in the same onboarding packet as the acceptable use policy. Red-team the UI annually with an internal volunteer. Document how to export audit logs for HR requests without exporting prompt bodies.
Published by MicroAI One (本地AI 1号网), a Shenzhen team working on local LLM hardware, software and deployment.