Settings

Settings is reached from the profile menu at the bottom of the sidebar. It confirms who you are signed in as, manages the API keys the Security Lab uses to generate agent responses, and configures the ticketing connector that files tickets for flagged prompts. It is a long scrolling page of cards, each with its own Save button.

Profile

Your appliance account: avatar, username and role. Profile details and roles are managed on the appliance (membership of lucien-admin) and cannot be changed from the console. The Security (Two-Factor, Login Alerts) and Notification Preferences (Email, Security Alerts, Weekly Reports) sections are placeholders marked NOT YET AVAILABLE in this build.

LLM Provider Keys

The keys the Security Lab uses to generate agent replies. Each provider card shows a CONFIGURED badge with the last four characters of the saved key, a key field (with show/hide), a model field, and a trash icon:

Provider	Default model
OpenAI	gpt-4o-mini
Anthropic	claude-haiku-4-5
Google Gemini	gemini-2.5-flash-lite
xAI Grok	grok-3-fast

Below them, Ollama Servers for self-hosted models: name, base URL and model (e.g. meribank → http://192.168.2.119:11434 → qwen3.8); the first is mirrored to the legacy ollama field for proxy back-compat. Save Keys commits the section: changes apply immediately, no restart.

Ticketing Connector

Files a ticket in Jira Cloud, ServiceNow and/or Splunk for every flagged prompt the middleware reports. Middleware sets the source: Middleware URL and Poll interval (s). Each sink has its own fields and activates once they are set; leave a secret blank to keep the current value, or use the trash icon to clear it.

Start the connector separately. Configuring sinks here does not start the connector. Start or stop the running connector (lucien-ticket.service) from System › Service Control.

Secrets are write-only. Saved keys, tokens and passwords are never returned to the browser: you only ever see a badge or a masked tail. A blank secret field means "keep what is stored," not "clear it."

Access

The editable cards are Administrator-only. Profile is read-only for everyone; Viewers never see secrets.