---
title: "FAQ"
description: "Product boundaries, security, offline use, and docs site tokens."
source: https://carina.nebutra.com/deployment/faq/
---

# FAQ

> Product boundaries, security, offline use, and docs site tokens.

Common product and operations questions.

    No. Carina is **local-first**. Nebutra Cloud identity/sync may wrap it, but policy and tool execution stay under local authority.

    No. Patch rollback recovers agent edits inside the runtime. Git remains the collaboration and history system of record.

    No. It can sit behind an IDE, but it focuses on **runtime governance** — sessions, policy, audit, rollback, workers, embedding.

    Yes for the runtime itself. Model providers and package installs may still need network depending on your setup. Use `--offline` to avoid auto reasoner wiring.

    Agents never read the environment directly. Secrets use a handle-based broker; logs never contain secret plaintext; command output is redacted against known values.

    See `SECURITY.md` in the repository. Do not open public issues for undisclosed vulnerabilities.

    Brand authority: `docs/brand/design-system/`.  
    Docs package sync: `pnpm sync-brand` from `apps/docs`.  
    Public component API: `--docs-*` tokens in `src/styles/docs-tokens.css`.

    `protocol/jsonrpc/methods.json` is authoritative. Narrative: `docs/rpc-api.md` and [JSON-RPC reference](/api/json-rpc/).

  Product truth moves quickly in alpha — when in doubt, trust `carina doctor` and the version you have installed.

## Source of truth

- Product posture: `docs/product.md` · cloud boundary: `docs/nebutra-cloud-boundary.md`
- Security: `docs/security-model.md` · `SECURITY.md`
- Live machine truth: `carina doctor` · `carina --help`
- Related: [Overview](/getting-started/introduction/) · [Policy](/concepts/policy/) · [CLI reference](/reference/cli/)

## Next

- [Installation](/getting-started/installation/) · [Local deploy](/deployment/local/)
- [Method catalog](/api/methods/) — full RPC surface

---
Source: https://carina.nebutra.com/deployment/faq/
Markdown: https://carina.nebutra.com/deployment/faq/index.md