What runs offline
Everything in the authoring loop.new, add app, import, check, validate, targets,
build, inspect, vocabulary, apply, fmt, doctor and version make no network call,
contact no model, and need no account.
That isn’t an accident. cordango check has to work from a clone of the open source repository with
nothing above it, and there’s a test in the suite that proves it.
Platform features need a Cordango workspace.
Sign up here and create one in a few minutes.
What reaches the network
Four commands:login, whoami, publish and logout. The CLI’s own help lists them separately
for exactly this reason.
sends a token
Connects to the named instance and confirms the token.
asks the instance
Which instance and which identity.
--offline answers from stored credentials without calling
out.sends your app
Builds from source and sends the resulting App Definition to the instance. Your definition, not
your source files and not your git history.
local only
Forgets a credential on this machine. See the warning below.
Tokens
A token is a dotted string with a fixed, scannable prefix.cordango login connects to the named instance, asks the server which tenant
it actually belongs to, and refuses when the two disagree. A pasted credential doesn’t get to tell
the CLI where to send itself.
Pass a token as --token rather than positionally if you’d rather it stayed out of your shell
history. Both spellings work.
What a key can do
A key acts as you. It carries your relationships and the roles those grant, so it reaches exactly what you reach and nothing more. No key is broader than its owner.AI
There’s no AI anywhere in the open foundation. The compiler, the CLI and the generator call no model, and a generated application contains no AI at runtime. AI is a Cordango Platform feature. It runs on the instance, on your workspace’s data, under that instance’s terms. An AI coding agent you point at your own workspace is a separate matter, and the ordinary one: whatever you give it goes wherever that vendor sends it. Your semantic source is the description of your business. Treat sharing it with an agent as the disclosure it is, and check your agent’s data retention terms rather than ours.The generated application
What comes out ofcordango build is yours, and so is its security.
The scaffold arrives with the parts that are easy to get wrong already right: the first-run account
endpoint that closes permanently, data protection keys on a volume rather than in the container,
antiforgery wired up, and cookies configured to survive a plain-HTTP local run without shipping that
setting to production.
Everything after that is an ordinary ASP.NET Core deployment. Nothing in it phones home, and nothing
in it needs us to keep existing.