Privacy

Your history stays
on your machine.

Sessions, retained output, and file change records are stored locally. Cloud models and network tools still receive what you send them.

Telemetry

  • No tracking

    Telemetry is off unless you send it to a collector you run.

  • Offline with a local model

    Use Ollama or llama.cpp without internet access, or point a providers.toml entry at ninfer-4090, a custom inference engine by Caudra's creator for Qwen3.8-27B on one RTX 4090. It serves a standard OpenAI-compatible endpoint that follows the official Responses API specification, so the entry sets protocol = "openai-responses" as it would for any such endpoint. Otherwise a normal run contacts your provider, checks models.caudra.ai for a signed model list at most once a day, and reaches Exa, or the search backends you set, when the agent searches the web.

  • Commands start from a cleared environment

    Shell commands receive only a short list of variables, such as PATH, HOME, and proxy settings, so API keys set for Caudra stay out of them. /env forwards the variables you choose, and a project .env or project config never supplies them.

  • Learning you can read and revert

    Continual learning builds a redacted digest of this project's sessions on your machine and sends it to the model on your Learn job, which can read more of that history to check a finding. It writes to instruction files and memory notes you can open, and /learn can revert each change. Turn it off with continual_learning = false.

  • Secrets kept out of the chat

    When a command needs a token, the agent asks for it on a private card. Shell commands receive it as an environment variable, and the value stays out of the transcript, logs, and every request to the model. An agent that can run commands can still read it, so review commands that use one as you would any other.

  • Private addresses refused

    webfetch checks every URL and redirect before it connects, and refuses private, loopback, and link-local addresses unless you list a host or network under [web] in your global config. A repository cannot add one.

  • Update checks you can turn off

    At startup, the interactive UI asks GitHub for a newer release at most once a day and shows a banner. GitHub receives your IP address and normal request metadata, but no session data or installed version. Caudra installs an update only when you click the banner or run /update, and asks first. Set ui.update_check = false to stop the checks.