Secrets stay server-side
Browser clients receive time-bounded capability grants, never raw provider credentials.
Machines and resources
Providers
Scoped provider adapters, credentials, balances, and capability boundaries.
Reachable fleet0 of 0loaded observation
Active runs00 total records
Queued work00 blocked
Budget—of —
Capability adapters
Connected providers
Leases reconcile
Provision, heartbeat, watchdog, cancellation, and teardown share one durable lifecycle.
Receipts are evidence
Provider IDs, price observations, and teardown results attach to the run ledger.