Documentation / Getting started
Air-gapped operation
Dream-Genie runs with no outbound connectivity at all. Nothing about the platform assumes it can reach us.
What changes, and what does not
Every module works identically. Monitoring, patching, the service desk, reconciliation, Genie himself — all of it runs on your hardware and none of it calls out.
Three things move by file instead of by network: your licence, product updates, and your usage record.
The licence
A licence is a signed file. Import it through Settings → Licence and the platform verifies the signature locally against a public key that ships with the software.
The signing key never leaves our premises and is never present in the platform. Verification is one-way — the platform confirms the signature is ours and needs nothing from us to do it.
Licences carry a validity window. Before it closes, request a renewal by email and import the replacement the same way. Import is idempotent — importing the same file twice changes nothing.
Updates
Update bundles are single signed archives containing the container images, the migrations and the release notes. Verify the checksum published alongside, transfer the bundle in, and run:
dg update apply ./dg-2026.08.bundleThe platform verifies the signature, checks the bundle's declared predecessor against your installed version, and refuses if they do not match.
A bundle that skips a version is refused rather than applied. Migrations are ordered, and applying them out of sequence is how a schema ends up in a state nobody designed.
Usage export
Billing is based on a signed usage record covering a calendar month in UTC. Air-gapped sites export it to file:
dg usage export --period 2026-08 --out ./usage-2026-08.jsonTen fields, signed with your deployment key. Read it before you send it — that is the whole point of it being a file.
A late export is expected on an air-gapped site and is not a fault. Your contracted floor charges on schedule; the variable portion settles when the record arrives, named against its original month.
What Genie does differently
Nothing, except that he cannot fetch live vendor pricing or check a vendor advisory feed. Where a capability depends on an outbound call he says so explicitly rather than returning an empty result.
Federated intelligence is off, because it is a network feature. Everything he learns stays local.
Not running it yet? Start a thirty-day evaluation — read-only, on your own estate, no card.
Thirty days · read-only · no card
Run it beside what you already have, against your real clients. It tells you what your tools are reporting that is not true.