Does PrivateNexus replace Proxmox / Caddy / my monitoring stack?
No. It sits above them and gives you one governed layer across all of them — it reads from and acts on your existing tools rather than replacing any of them.
Do I need a team to use the governance/approval flow?
No. Dual-control (a second reviewer approving your actions) is the default, but it automatically relaxes for accounts with no second reviewer on record, so a solo operator isn't blocked from approving their own routine actions. See Governance & Approvals.
What happens if Discovery finds something I don't want tracked?
Dismiss it from the review queue. Nothing Discovery finds gets registered automatically — every candidate needs a human decision either way. See Discovery.
Can Security Lockdown Mode do something destructive without me approving it?
Alert, Soft, and Hard tiers can act automatically, but every action they take still goes through the same blast-radius and blocklist checks as any manually-approved action. Full tier — the most severe response — has no automatic trigger at all; it requires a human with breakglass-level access to activate it deliberately. See Security Lockdown Mode.
How is my identity managed?
Through Keycloak (OpenID Connect) — there's no separate PrivateNexus password. See Roles & Permissions.
What's the difference between a backup existing and a service's Recovery Score being high?
A backup job reporting success only confirms the copy step ran. Recovery Score reflects whether that backup has actually been verified restorable and is recent — see File Registry & Restore Planner.