Privacy and Deployment

NCP is deployment-agnostic. It does not require all alerts to go to a central cloud.

Supported Models

  1. Local-first NerveOS System
  2. Private cloud NerveOS System
  3. Hosted NerveOS System
  4. Hybrid relay model

Sensitive payloads should use context references instead of copying raw data. Avoid storing actual secrets, full private emails, bank details, school messages, legal content, or API keys in NCP events or Firestore.

{
  "summary": "Possible GitHub secret exposure detected",
  "context_refs": [
    {
      "type": "mcp",
      "ref": "mcp://github/security-alerts/123",
      "sensitivity": "secret"
    }
  ]
}