Skip to content

Security Model

Agirunner security is mostly about keeping the right concerns in the right layer.

That is why the docs talk so much about platform versus runtime. The boundary is not only an architecture concern. It is also a security concern.

The platform owns:

  • authentication and scopes
  • operator records
  • workflow state
  • integration configuration
  • public API access

The runtime owns:

  • execution isolation
  • workspace and shell safeguards
  • secret redaction
  • bounded task execution

If a security decision depends on workflow meaning, it belongs in the platform. If it depends on execution mechanics, it belongs in the runtime.

That separation is what lets Agirunner be both more secure and more understandable.