Phase 1A · Milestone 1
Settings
Nova-owned operations · account-scoped evidence · human review
Model providers and private credentials
Claude, GPT and Gemini adapters are supported. This interface cannot inspect API keys or confirm provider connectivity. A listed execution profile is not proof that its credentials work.
Where an authorized infrastructure operator configures keys
/opt/nova-ai-internal/.env.runtime
- Claude: NOVA_CLAUDE_API_KEY
- GPT: NOVA_OPENAI_API_KEY
- Gemini: NOVA_GEMINI_API_KEY
Configure only approved providers through protected server access. Never paste keys into chat, this dashboard, source control, company context or knowledge documents.
- Approve the provider, exact model, permitted data and usage limits.
- Store its key privately and configure its profile in
/opt/nova-ai-internal/profiles.internal.json, referencing the environment variable name—not the secret value. - Have an authorized operator apply the configuration and run a controlled connectivity and evaluation check. Do not mark live-model acceptance complete from configuration alone.
Execution profiles supplied by the current Nova session
Unavailable until you sign in through Nova.
Administrator spending guard
Runtime-wide aggregate, not one account’s bill. Available only to authorized configuration administrators.
API-reported token cost · USD
Unavailable
Outstanding reservations · USD
Unavailable
Total committed · USD
Unavailable
Approved cumulative cap · USD
Unavailable
Per-run cap · USD
Unavailable
Maximum model calls per run
Unavailable
Warning state unavailable.
Token cost is calculated from reported API usage, not a reconciled provider invoice. Outstanding reservations include uncertain calls and are shown separately; they are not counted as confirmed token usage. Unknown or restricted values never appear as zero. A not-blocked status does not approve a call, reset a cap, or bypass other controls.
Connect through Nova
This local frontend is disconnected. The approved command-center hostname uses Nova sign-in; localhost does not proxy authentication. No sample records are being presented as operational data.