Same edit. Different exposure.

What crosses

A handle, not a file

pandō hands the model an opaque node id, a content hash, and the new name — never the method body.

Where the edit lands

On your machine

Every reference rewritten locally — direct, aliased, re-exported. Identical result.

Why it matters

Source stays local

The trade-off — smart model or private code — was never real. Keep the frontier model; lose the exposure.