Document the Onde telemetry in the README

On-device models can report load and response timing through Onde Inference when the build carries Onde's credentials. Say what goes out, what doesn't, and how to turn it off. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Co-Authored-By: siGit Code v1.6.3 <noreply@sigit.si>

Seto Elkahfi committed Oct 8, 2026 at 18:10 UTC 0570a04d98b8628edeeaf0cfaef86ca836a00254
2 files changed +28
CHANGELOG.md
+3
@@ -16,6 +16,9 @@
16 while siGit Code Cloud tiers and on-device models, none of which take audio
17 today, get a note in its place and the editor says the clip was left out
18 (#143).
19 +- **The README says what telemetry is sent.** A new Telemetry section covers
20 + the model-timing events Onde Inference can report for on-device models,
21 + what they leave out, and how to turn them off with `ONDE_DISABLE_PULSE=1`.
22
23 ### Changed
24
README.md
+25
@@ -164,6 +164,31 @@ interactive permission prompt, approve only the tools the run needs with repeata
164 `--allow-tool` flags. The legacy `sigit -p "<prompt>"` form remains supported. See the
165 [headless execution reference](docs/headless.md) for the event contract and exit codes.
166
167 +## Telemetry
168 +
169 +siGit Code itself collects no usage analytics. On-device models run on
170 +[Onde Inference](https://ondeinference.com), and Onde can report model timing to its own
171 +dashboard. That reporting only switches on in builds where Onde's credentials were embedded at
172 +compile time. When it is on, siGit Code sends:
173 +
174 +- one event when an on-device model finishes loading: the model's Hugging Face repo ID, its
175 + display name, and how long the load took;
176 +- one event per on-device response: the model ID, a per-process request ID, the response time,
177 + the time to first token when it was measured, and whether it succeeded, errored, or was
178 + cancelled.
179 +
180 +Nothing from your conversation goes with them: no prompts, responses, file paths, or code.
181 +siGit Code doesn't set a machine identifier, so every install reports as the same
182 +`onde-unknown` edge, and it sends no location. Models you run through siGit Code Cloud or your
183 +own endpoint send no Onde events.
184 +
185 +To turn it off, set `ONDE_DISABLE_PULSE=1` in the environment siGit Code runs in. For an
186 +editor, put it in the agent's `env` block:
187 +
188 +```json
189 +"env": { "ONDE_DISABLE_PULSE": "1" }
190 +```
191 +
192 ## Platform support
193
194 | Platform | Architecture |