Private runner
Private runtime and job ledger for MarketLink.
This page explains where the private runner executes, how credentials stay inside the customer boundary, and which durable jobs have been recorded. Launch validation, dry-runs, and evidence collection from Run Builder.
customer boundaryaudit-readinessno secrets stored
Jobs
9
durable job records
Active
0
queued, preflight, running
Succeeded
9
completed or packaged
Review
0
failed, timed out, review
Signature
unsigned
unsigned
Job ledger
Collector jobs
succeededcms-ede-validationvalidate
collector-job-1777607979446-9b2b6f9a
May 1, 3:59 AM413 msexit 0
npx tsx scripts/cms-ede-validate.tsscenario: configured
persona: any
runner: nextjs-node-runner
succeededcms-ede-validationvalidate
collector-job-1777607779995-e3a5057c
May 1, 3:56 AM446 msexit 0
npx tsx scripts/cms-ede-validate.tsscenario: configured
persona: any
runner: nextjs-node-runner
succeededcms-ede-validationvalidate
collector-job-1777607682570-fb28ee48
May 1, 3:54 AM431 msexit 0
npx tsx scripts/cms-ede-validate.tsscenario: configured
persona: any
runner: nextjs-node-runner
succeededcms-ede-validationvalidate
collector-job-1777607491370-448b2018
May 1, 3:51 AM411 msexit 0
npx tsx scripts/cms-ede-validate.tsscenario: configured
persona: any
runner: nextjs-node-runner
succeededcms-ede-validationvalidate
collector-job-1777606843953-dfa99407
May 1, 3:40 AM421 msexit 0
npx tsx scripts/cms-ede-validate.tsscenario: configured
persona: any
runner: nextjs-node-runner
succeededcms-ede-validationvalidate
collector-job-1777606435562-50b48820
May 1, 3:33 AM466 msexit 0
npx tsx scripts/cms-ede-validate.tsscenario: configured
persona: any
runner: nextjs-node-runner
succeededcms-ede-validationvalidate
collector-job-1777606071328-c8039e3e
May 1, 3:27 AM453 msexit 0
npx tsx scripts/cms-ede-validate.tsscenario: configured
persona: any
runner: nextjs-node-runner
succeededcms-ede-validationvalidate
collector-job-1777605906235-708c3e90
May 1, 3:25 AM471 msexit 0
npx tsx scripts/cms-ede-validate.tsscenario: configured
persona: any
runner: nextjs-node-runner
succeededcms-ede-validationvalidate
collector-job-1777605870476-6d9a4260
May 1, 3:24 AM546 msexit 0
npx tsx scripts/cms-ede-validate.tsscenario: configured
persona: any
runner: nextjs-node-runner
Runtime phases
Private collection lifecycle
01
Package
Generate a project-specific runner manifest with allowed commands, evidence roots, and the local job store path.
02
Preflight
Validate source mappings, target allowlist, credential presence, CMS blockers, and redaction policy before collection.
03
Collect
Run browser/API/manual collectors in the private runtime and write raw evidence to the project workspace.
04
Review
Redact, approve, block, or reject artifacts before they become auditor-ready package inputs.
05
Export
Generate checksummed source-row indexes and auditor packages only from approved evidence.
Package integrity
Signed-runner readiness
Package digest computed from the manifest payload before signature attachment.
Optional HMAC-SHA256 signature with key material supplied only by the private runtime.
Allowed command list prevents arbitrary command execution from the control plane.
Target URL validation rejects embedded credentials and preserves host allowlist review.
Job store and package manifests are ignored by git to avoid committing runtime state.
Auditor export requires redaction and approval before raw artifacts become package inputs.