Prove that nothing leaves your machine
Run the engine with networking disabled and use it normally: if it still answers, the model and the conversation are local. For a stricter check, watch outbound connections while you chat — you should only see the local port. Anything else is worth investigating.