The app does the work

The tool request travels back to the app on Tom’s computer.

The program checks whether the action is allowed. It may also ask Tom for permission.

Only then does local software create shopping.txt.

Rufus requested the action. The downloaded program checked it. Tom’s computer performed it.

The action happened outside the jar.