Runners

Workflow	Type	Description
runner.acr-registry-mirror-ensure	Dag	Ensure an ACR cache-rule mirror exists for an upstream registry
runner.acr-registry-mirror-reconcile	Dag	Reconcile an ACR cache-rule mirror to its expected state
runner.acr-registry-mirror-teardown	Linear	Delete an ACR cache-rule mirror, its credential set and backing secrets (operator-only)
runner.agent-image-resolve	Linear	Resolve the agent runner image without direct SSM clients
runner.associate_capacity_provider	Dag	Associate the EC2 Capacity Provider with its ECS cluster.
runner.associate_capacity_provider__post	Atomic	Post step for runner.associate_capacity_provider: forward primitive output.
runner.associate_capacity_provider__pre	Atomic	Pre step for runner.associate_capacity_provider: load RunnerGroup and derive primitive inputs.
runner.azure-managed-environment-create	Linear	Create an Azure Container Apps managed environment
runner.azure-managed-environment-sync	Linear	Validate and store an Azure Container Apps managed environment on a runner group
runner.azure.container_apps.ensure-environment	Dag	Idempotently re-apply the Azure Container Apps managed environment for a runner group.
runner.azure.container_apps.ensure-environment__post	Atomic	Post step for runner.azure.container_apps.ensure-environment: forward primitive output.
runner.azure.container_apps.ensure-environment__pre	Atomic	Pre step for runner.azure.container_apps.ensure-environment: load RunnerGroup and derive primitive inputs.
runner.azure.container_apps.ensure-job	Dag	Idempotently re-apply the Azure Container Apps Job spec (and replica count) for a runner group.
runner.azure.container_apps.ensure-job__post	Atomic	Post step for runner.azure.container_apps.ensure-job: forward primitive output.
runner.azure.container_apps.ensure-job__pre	Atomic	Pre step for runner.azure.container_apps.ensure-job: load RunnerGroup and derive primitive inputs.
runner.cloud-run-job-reap	Linear	Reap orphaned Cloud Run Jobs (unreferenced, aged, non-shared) to reclaim regional quota
runner.cloud-run-registry-mirror-ensure	Dag	Ensure an Artifact Registry mirror exists for a Cloud Run upstream
runner.cloud-run-registry-mirror-reconcile	Dag	Reconcile an Artifact Registry mirror to its expected state
runner.cloud-run-registry-mirror-teardown	Linear	Delete an AR remote-repo mirror + backing secret (operator-only)
runner.create_auto_scaling_group	Dag	Create the EC2 Auto Scaling Group for an EC2 runner environment.
runner.create_auto_scaling_group__post	Atomic	Post step for runner.create_auto_scaling_group: persist RunnerCloudResource from primitive output.
runner.create_auto_scaling_group__pre	Atomic	Pre step for runner.create_auto_scaling_group: load RunnerGroup and derive primitive inputs.
runner.create_ec2_capacity_provider	Dag	Create the ECS Capacity Provider for an EC2 runner environment.
runner.create_ec2_capacity_provider__post	Atomic	Post step for runner.create_ec2_capacity_provider: persist RunnerCloudResource from primitive output.
runner.create_ec2_capacity_provider__pre	Atomic	Pre step for runner.create_ec2_capacity_provider: load RunnerGroup and derive primitive inputs.
runner.create_ec2_ecs_cluster	Dag	Create or validate the ECS cluster for an EC2 Auto Scaling runner environment.
runner.create_ec2_ecs_cluster__post	Atomic	Post step for runner.create_ec2_ecs_cluster: persist RunnerCloudResource from primitive output.
runner.create_ec2_ecs_cluster__pre	Atomic	Pre step for runner.create_ec2_ecs_cluster: load RunnerGroup and derive primitive inputs.
runner.create_ec2_log_group	Dag	Create the CloudWatch log group for an EC2 runner environment.
runner.create_ec2_log_group__post	Atomic	Post step for runner.create_ec2_log_group: persist RunnerCloudResource from primitive output.
runner.create_ec2_log_group__pre	Atomic	Pre step for runner.create_ec2_log_group: load RunnerGroup and derive primitive inputs.
runner.create_ec2_vm_iam_instance_profile	Dag	Create or validate the raw EC2 VM runner IAM role + instance profile.
runner.create_ec2_vm_iam_instance_profile__post	Atomic	Post step for runner.create_ec2_vm_iam_instance_profile: persist RunnerCloudResource from primitive output.
runner.create_ec2_vm_iam_instance_profile__pre	Atomic	Pre step for runner.create_ec2_vm_iam_instance_profile: load RunnerGroup and derive primitive inputs.
runner.create_ec2_vm_launch_template	Dag	Create the EC2 launch template (instance shape) for a raw EC2 VM runner group.
runner.create_ec2_vm_launch_template__post	Atomic	Post step for runner.create_ec2_vm_launch_template: persist RunnerCloudResource from primitive output.
runner.create_ec2_vm_launch_template__pre	Atomic	Pre step for runner.create_ec2_vm_launch_template: load RunnerGroup and derive primitive inputs.
runner.create_ec2_vm_log_group	Dag	Create the CloudWatch log group for a raw EC2 VM runner environment.
runner.create_ec2_vm_log_group__post	Atomic	Post step for runner.create_ec2_vm_log_group: persist RunnerCloudResource from primitive output.
runner.create_ec2_vm_log_group__pre	Atomic	Pre step for runner.create_ec2_vm_log_group: load RunnerGroup and derive primitive inputs.
runner.create_ecs_cluster	Dag	Create or validate the ECS cluster for a Fargate runner environment.
runner.create_ecs_cluster__post	Atomic	Post step for runner.create_ecs_cluster: persist RunnerCloudResource from primitive output.
runner.create_ecs_cluster__pre	Atomic	Pre step for runner.create_ecs_cluster: load RunnerGroup and derive primitive inputs.
runner.create_gce_instance_template	Dag	Create or resolve the GCE Instance Template for a runner environment.
runner.create_gce_instance_template__post	Atomic	Post step for runner.create_gce_instance_template: persist RunnerCloudResource from primitive output.
runner.create_gce_instance_template__pre	Atomic	Pre step for runner.create_gce_instance_template: load RunnerGroup and derive primitive inputs.
runner.create_gce_service_account	Dag	Resolve / create / bind a GCP service account for runner VMs.
runner.create_gce_service_account__post	Atomic	Extract SA email + write GCE_SERVICE_ACCOUNT RunnerResource.
runner.create_gce_service_account__pre	Atomic	Resolve SA mode + derive primitive inputs.
runner.create_iam_instance_profile	Dag	Create or validate ecsInstanceRole IAM role + instance profile.
runner.create_iam_instance_profile__post	Atomic	Post step for runner.create_iam_instance_profile: persist RunnerCloudResource from primitive output.
runner.create_iam_instance_profile__pre	Atomic	Pre step for runner.create_iam_instance_profile: load RunnerGroup and derive primitive inputs.
runner.create_instance_group_manager	Dag	Create a GCE managed instance group from an instance template for a runner group.
runner.create_instance_group_manager__post	Atomic	Post step for runner.create_instance_group_manager: persist RunnerCloudResource from primitive output.
runner.create_instance_group_manager__pre	Atomic	Pre step for runner.create_instance_group_manager: load RunnerGroup and derive primitive inputs.
runner.create_instance_template	Dag	Create a GCE instance template for a runner group's managed instance group.
runner.create_instance_template__post	Atomic	Post step for runner.create_instance_template: persist RunnerCloudResource from primitive output.
runner.create_instance_template__pre	Atomic	Pre step for runner.create_instance_template: load RunnerGroup and derive primitive inputs.
runner.create_launch_template	Dag	Create the EC2 Launch Template for an EC2 runner environment.
runner.create_launch_template__post	Atomic	Post step for runner.create_launch_template: persist RunnerCloudResource from primitive output.
runner.create_launch_template__pre	Atomic	Pre step for runner.create_launch_template: load RunnerGroup and derive primitive inputs.
runner.create_log_group	Dag	Create the CloudWatch log group for a Fargate runner environment.
runner.create_log_group__post	Atomic	Post step for runner.create_log_group: persist RunnerCloudResource from primitive output.
runner.create_log_group__pre	Atomic	Pre step for runner.create_log_group: load RunnerGroup and derive primitive inputs.
runner.delete-auto-scaling-group	Dag	Drain to zero and delete the EC2 Auto Scaling Group for a runner group.
runner.delete-auto-scaling-group__post	Atomic	Post step for runner.delete-auto-scaling-group: mark RunnerCloudResource deleted.
runner.delete-auto-scaling-group__pre	Atomic	Pre step for runner.delete-auto-scaling-group: load RunnerGroup and derive primitive inputs.
runner.delete-launch-template	Dag	Delete the EC2 launch template backing a runner group's ASG.
runner.delete-launch-template__post	Atomic	Post step for runner.delete-launch-template: mark RunnerCloudResource deleted.
runner.delete-launch-template__pre	Atomic	Pre step for runner.delete-launch-template: load RunnerGroup and derive primitive inputs.
runner.delete_auto_scaling_group	Dag	Scale ASG to zero and force-delete it; mark RunnerResource deleted.
runner.delete_auto_scaling_group__post	Atomic	Mark AUTO_SCALING_GROUP RunnerResource deleted.
runner.delete_auto_scaling_group__pre	Atomic	Resolve ASG name from runner_group config.
runner.delete_cloud_run_job	Dag	Delete the Cloud Run Job backing a runner group.
runner.delete_cloud_run_job__post	Atomic	Post step for runner.delete_cloud_run_job: mark RunnerCloudResource deleted.
runner.delete_cloud_run_job__pre	Atomic	Pre step for runner.delete_cloud_run_job: load RunnerGroup and derive primitive inputs.
runner.delete_cloud_run_registry_mirror	Dag	Delete the Artifact Registry registry-mirror repository for a runner group.
runner.delete_cloud_run_registry_mirror__post	Atomic	Post step for runner.delete_cloud_run_registry_mirror: mark RunnerCloudResource deleted.
runner.delete_cloud_run_registry_mirror__pre	Atomic	Pre step for runner.delete_cloud_run_registry_mirror: load RunnerGroup and derive primitive inputs.
runner.delete_cluster	Dag	Delete the runner's ECS cluster.
runner.delete_cluster__post	Atomic	Post step for runner.delete_cluster: mark RunnerCloudResource deleted.
runner.delete_cluster__pre	Atomic	Pre step for runner.delete_cluster: load RunnerGroup and derive primitive inputs.
runner.delete_ec2_capacity_provider	Dag	Delete the ECS Capacity Provider for an EC2 runner environment.
runner.delete_ec2_capacity_provider__post	Atomic	Post step for runner.delete_ec2_capacity_provider: mark RunnerCloudResource deleted.
runner.delete_ec2_capacity_provider__pre	Atomic	Pre step for runner.delete_ec2_capacity_provider: load RunnerGroup and derive primitive inputs.
runner.delete_ec2_vm_iam_instance_profile	Dag	Conditionally delete the shared raw EC2 VM instance profile; always mark the RunnerResource deleted.
runner.delete_ec2_vm_iam_instance_profile__post	Atomic	Mark the instance_profile RunnerResource deleted.
runner.delete_ec2_vm_iam_instance_profile__pre	Atomic	Evaluate delete_iam_on_cleanup and build primitive input.
runner.delete_ec2_vm_launch_template	Dag	Delete the raw EC2 VM runner launch template and mark the resource deleted.
runner.delete_ec2_vm_launch_template__post	Atomic	Post step for runner.delete_ec2_vm_launch_template: mark RunnerCloudResource deleted.
runner.delete_ec2_vm_launch_template__pre	Atomic	Pre step for runner.delete_ec2_vm_launch_template: load RunnerGroup and derive primitive inputs.
runner.delete_ec2_vm_log_group	Dag	Conditionally delete the raw EC2 VM runner log group; always mark the RunnerResource deleted.
runner.delete_ec2_vm_log_group__post	Atomic	Mark the log_group RunnerResource deleted.
runner.delete_ec2_vm_log_group__pre	Atomic	Evaluate delete_log_group_on_teardown and build primitive input.
runner.delete_gcp_workload	Dag	Delete GCE VM and instance template for a runner environment.
runner.delete_gcp_workload__post	Atomic	Mark GCE_MIG + GCE_INSTANCE_TEMPLATE RunnerResource rows deleted.
runner.delete_gcp_workload__pre	Atomic	Resolve MIG + template names for deletion.
runner.delete_iam_instance_profile	Dag	Conditionally delete the ECS instance profile + always mark resource deleted.
runner.delete_iam_instance_profile__post	Atomic	Mark INSTANCE_PROFILE RunnerResource deleted.
runner.delete_iam_instance_profile__pre	Atomic	Read config.delete_iam_on_cleanup and build primitive input.
runner.delete_kubernetes_deployment	Dag	Delete the Kubernetes Deployment for a runner environment.
runner.delete_kubernetes_deployment__post	Atomic	Post step for runner.delete_kubernetes_deployment: mark RunnerCloudResource deleted.
runner.delete_kubernetes_deployment__pre	Atomic	Pre step for runner.delete_kubernetes_deployment: load RunnerGroup and derive primitive inputs.
runner.delete_kubernetes_secret	Dag	Delete the Kubernetes registration Secret for a runner environment.
runner.delete_kubernetes_secret__post	Atomic	Post step for runner.delete_kubernetes_secret: mark RunnerCloudResource deleted.
runner.delete_kubernetes_secret__pre	Atomic	Pre step for runner.delete_kubernetes_secret: load RunnerGroup and derive primitive inputs.
runner.delete_launch_template	Dag	Delete the EC2 Launch Template for an EC2 runner environment.
runner.delete_launch_template__post	Atomic	Post step for runner.delete_launch_template: mark RunnerCloudResource deleted.
runner.delete_launch_template__pre	Atomic	Pre step for runner.delete_launch_template: load RunnerGroup and derive primitive inputs.
runner.delete_log_group	Dag	Delete CloudWatch log group when config allows; always mark RunnerResource deleted.
runner.delete_log_group__post	Atomic	Mark LOG_GROUP RunnerResource deleted.
runner.delete_log_group__pre	Atomic	Derive log group name and skip flag.
runner.delete_task_definition	Dag	Deregister the runner's ECS task definition.
runner.delete_task_definition__post	Atomic	Post step for runner.delete_task_definition: mark RunnerCloudResource deleted.
runner.delete_task_definition__pre	Atomic	Pre step for runner.delete_task_definition: load RunnerGroup and derive primitive inputs.
runner.deploy_cloud_run_service	Dag	Create or update the Cloud Run service for a runner environment.
runner.deploy_cloud_run_service__post	Atomic	Post step for runner.deploy_cloud_run_service: persist RunnerCloudResource from primitive output.
runner.deploy_cloud_run_service__pre	Atomic	Pre step for runner.deploy_cloud_run_service: load RunnerGroup and derive primitive inputs.
runner.disassociate-ecs-capacity-providers	Dag	Disassociate ECS cluster capacity providers for a runner group before tearing down the EC2 Auto Scaling Group.
runner.disassociate-ecs-capacity-providers__post	Atomic	Post step for runner.disassociate-ecs-capacity-providers: forward primitive output.
runner.disassociate-ecs-capacity-providers__pre	Atomic	Pre step for runner.disassociate-ecs-capacity-providers: load RunnerGroup and derive primitive inputs.
runner.disassociate_capacity_provider	Dag	Remove capacity providers from the ECS cluster's strategy.
runner.disassociate_capacity_provider__post	Atomic	Post step for runner.disassociate_capacity_provider: forward primitive output.
runner.disassociate_capacity_provider__pre	Atomic	Pre step for runner.disassociate_capacity_provider: load RunnerGroup and derive primitive inputs.
runner.dispatch-from-job-queued	Linear	Select an active runner group whose labels cover the job's runner_labels and start runner.execution-launch-* on it; respects max_count.
runner.do_app_job_ensure	Dag	Ensure the DigitalOcean App Platform Job component for a runner group.
runner.do_app_job_ensure__post	Atomic	Post step for runner.do_app_job_ensure: forward primitive output.
runner.do_app_job_ensure__pre	Atomic	Pre step for runner.do_app_job_ensure: load RunnerGroup and derive primitive inputs.
runner.drift_build_plan	Atomic	Merge detect results into a structured drift plan
runner.drift_detect_cloud_run_job	Atomic	Detect drift: Cloud Run credential reachability and config consistency
runner.drift_detect_ecs_cluster	Atomic	Detect drift: ECS cluster existence and ACTIVE status
runner.drift_detect_gce_instance_template	Atomic	Detect drift: GCE instance template existence and config match
runner.drift_detect_gce_service_account	Atomic	Detect drift: GCE service account reachability and existence
runner.drift_detect_init	Atomic	Initialize drift detection: load group, gate, resolve state
runner.drift_detect_log_group	Atomic	Detect drift: CloudWatch log group existence
runner.drift_detect_pull_secret	Atomic	Detect drift: Secrets Manager pull secret existence
runner.drift_detect_task_definition	Atomic	Detect drift: ECS task definition existence and image match
runner.drift_finalize	Atomic	Persist drift plan and optionally chain repair
runner.drift_repair_cloud_run_job	Atomic	Repair drift: re-finalize Cloud Run environment metadata
runner.drift_repair_ecs_cluster	Atomic	Repair drift: create or restore ECS cluster
runner.drift_repair_finalize	Atomic	Finalize drift repair: mark plan outcome and sync runner_group
runner.drift_repair_gce_instance_template	Atomic	Repair drift: create or update GCE instance template
runner.drift_repair_gce_service_account	Atomic	Repair drift: create managed GCE service account
runner.drift_repair_load	Atomic	Load drift plan and gate on concurrent mutations
runner.drift_repair_log_group	Atomic	Repair drift: create or restore CloudWatch log group
runner.drift_repair_task_definition	Atomic	Repair drift: register new ECS task definition
runner.ec2-vm-disk-usage-probe	Linear	Probe EC2 VM disk usage through SSM workflow primitives
runner.ec2-vm-ssm-preflight	Linear	Validate STS identity and SSM RunCommand prerequisites for EC2 VM runners
runner.ensure_acr_mirror_repository	Atomic	Upsert the ACR cache rule backing the mirror
runner.ensure_acr_mirror_secret	Atomic	Upsert the Key Vault secrets holding the upstream pull credential
runner.ensure_cloud_run_mirror_repository	Linear	Upsert the Artifact Registry remote repository mirror
runner.ensure_cloud_run_mirror_secret	Linear	Upsert the Secret Manager secret holding the upstream pull credential
runner.ensure_iam_instance_profile	Linear	Idempotently ensure an IAM role, its managed-policy attachments, and an instance profile (with the role added) exist for runner EC2 instances.
runner.environment-associate-capacity-providers	Dag	Associate ECS capacity providers with the runner group's cluster.
runner.environment-associate-capacity-providers__post	Atomic	Post step for runner.environment-associate-capacity-providers: forward primitive output.
runner.environment-associate-capacity-providers__pre	Atomic	Pre step for runner.environment-associate-capacity-providers: load RunnerGroup and derive primitive inputs.
runner.environment-build.claim	Atomic	Lease one immutable environment build to a trusted builder.
runner.environment-build.fail	Atomic	Fail or block a leased environment build with safe evidence.
runner.environment-build.heartbeat	Atomic	Heartbeat and advance a trusted environment build lease.
runner.environment-build.publish	Atomic	Publish reproducible OCI environment identities for verification.
runner.environment-build.reconcile	Atomic	Reconcile expired environment-build leases.
runner.environment-build.request	Atomic	Request an immutable repository environment build.
runner.environment-build.retry	Atomic	Retry a failed or unblocked immutable environment request.
runner.environment-build.verify	Atomic	Verify and mark an immutable coding environment ready.
runner.environment-builder-config-reconcile-kubernetes	Atomic	Reconcile trusted environment-builder identity, coordinates and its standalone workload before rotating a hosted coding runner pool
runner.environment-builder-runtime-delete-kubernetes	Atomic	Delete a hosted coding group's trusted builder runtime
runner.environment-cloud-run-service-upsert	Dag	Idempotent create-or-update of the Cloud Run service for a runner group.
runner.environment-cloud-run-service-upsert__post	Atomic	Post step for runner.environment-cloud-run-service-upsert: persist RunnerCloudResource from primitive output.
runner.environment-cloud-run-service-upsert__pre	Atomic	Pre step for runner.environment-cloud-run-service-upsert: load RunnerGroup and derive primitive inputs.
runner.environment-deletion	Dag	Delete ECS/Fargate environment for a runner group
runner.environment-deletion-azure-container-apps	Linear	Delete Azure Container Apps environment for a runner group
runner.environment-deletion-cloud-run	Linear	Delete Cloud Run environment for a runner group
runner.environment-deletion-do-app-job	Linear	Delete DigitalOcean App Job environment for a runner group
runner.environment-deletion-ec2	Dag	Delete EC2 Auto Scaling environment for a runner group
runner.environment-deletion-ec2-vm	Dag	Delete the raw EC2 VM environment for a runner group
runner.environment-deletion-gcp	Dag	Delete GCP/GCE environment for a runner group
runner.environment-deletion-kubernetes	Dag	Delete Kubernetes runner environment for a runner group
runner.environment-drift-detect	Dag	Detect environment drift for a runner group across all backends
runner.environment-drift-repair	Dag	Repair environment drift for a runner group
runner.environment-health-check	Linear	Cloud-side health check for the AWS Fargate (ECS) runner environment.
runner.environment-health-check-azure-container-apps	Linear	Cloud-side health check for the Azure Container Apps Job runner environment (describe job, evaluate verdict, sync group status).
runner.environment-health-check-cloud-run	Linear	Cloud-side health check for the GCP Cloud Run runner environment.
runner.environment-health-check-do-app-job	Linear	Cloud-side health check for the DigitalOcean App Platform Job runner environment.
runner.environment-health-check-ec2	Linear	Cloud-side health check for the AWS EC2 Auto Scaling Group runner environment.
runner.environment-health-check-gcp	Linear	Cloud-side health check for the GCP GCE managed instance group runner environment.
runner.environment-provision	Dag	Provision ECS/Fargate environment for a runner group
runner.environment-provision-azure-container-apps	Linear	Provision Azure Container Apps environment for a runner group
runner.environment-provision-azure-containerapps-environment	Dag	Ensure the Azure Container Apps Environment for a runner group.
runner.environment-provision-azure-containerapps-environment__post	Atomic	Post step for runner.environment-provision-azure-containerapps-environment: persist RunnerCloudResource from primitive output.
runner.environment-provision-azure-containerapps-environment__pre	Atomic	Pre step for runner.environment-provision-azure-containerapps-environment: load RunnerGroup and derive primitive inputs.
runner.environment-provision-azure-containerapps-job	Dag	Create/upsert the Azure Container Apps Job for a runner group.
runner.environment-provision-azure-containerapps-job__post	Atomic	Post step for runner.environment-provision-azure-containerapps-job: persist RunnerCloudResource from primitive output.
runner.environment-provision-azure-containerapps-job__pre	Atomic	Pre step for runner.environment-provision-azure-containerapps-job: load RunnerGroup and derive primitive inputs.
runner.environment-provision-cloud-run	Dag	Provision Cloud Run environment for a runner group
runner.environment-provision-do-app-job	Linear	Provision DigitalOcean App Job environment for a runner group
runner.environment-provision-ec2	Dag	Provision EC2 Auto Scaling environment for a runner group
runner.environment-provision-ec2-asg	Dag	Create the Auto Scaling Group for an EC2-backed runner group.
runner.environment-provision-ec2-asg__post	Atomic	Post step for runner.environment-provision-ec2-asg: persist RunnerCloudResource from primitive output.
runner.environment-provision-ec2-asg__pre	Atomic	Pre step for runner.environment-provision-ec2-asg: load RunnerGroup and derive primitive inputs.
runner.environment-provision-ec2-capacity-providers	Dag	Associate the ASG capacity provider with the runner group's ECS cluster.
runner.environment-provision-ec2-capacity-providers__post	Atomic	Post step for runner.environment-provision-ec2-capacity-providers: forward primitive output.
runner.environment-provision-ec2-capacity-providers__pre	Atomic	Pre step for runner.environment-provision-ec2-capacity-providers: load RunnerGroup and derive primitive inputs.
runner.environment-provision-ec2-launch-template	Dag	Create the EC2 launch template for a runner group's Auto Scaling Group.
runner.environment-provision-ec2-launch-template__post	Atomic	Post step for runner.environment-provision-ec2-launch-template: persist RunnerCloudResource from primitive output.
runner.environment-provision-ec2-launch-template__pre	Atomic	Pre step for runner.environment-provision-ec2-launch-template: load RunnerGroup and derive primitive inputs.
runner.environment-provision-ec2-vm	Dag	Provision a raw EC2 VM environment for a runner group
runner.environment-provision-fargate-capacity-providers	Dag	Associate FARGATE/FARGATE_SPOT capacity providers with the runner group's cluster.
runner.environment-provision-fargate-capacity-providers__post	Atomic	Post step for runner.environment-provision-fargate-capacity-providers: forward primitive output.
runner.environment-provision-fargate-capacity-providers__pre	Atomic	Pre step for runner.environment-provision-fargate-capacity-providers: load RunnerGroup and derive primitive inputs.
runner.environment-provision-fargate-cluster	Dag	Create the ECS cluster for a Fargate-backed runner group.
runner.environment-provision-fargate-cluster__post	Atomic	Post step for runner.environment-provision-fargate-cluster: persist RunnerCloudResource from primitive output.
runner.environment-provision-fargate-cluster__pre	Atomic	Pre step for runner.environment-provision-fargate-cluster: load RunnerGroup and derive primitive inputs.
runner.environment-provision-fargate-log-group	Dag	Create the CloudWatch log group for a Fargate-backed runner group.
runner.environment-provision-fargate-log-group__post	Atomic	Post step for runner.environment-provision-fargate-log-group: persist RunnerCloudResource from primitive output.
runner.environment-provision-fargate-log-group__pre	Atomic	Pre step for runner.environment-provision-fargate-log-group: load RunnerGroup and derive primitive inputs.
runner.environment-provision-fargate-task-definition	Dag	Register the Fargate task definition for a runner group.
runner.environment-provision-fargate-task-definition__post	Atomic	Post step for runner.environment-provision-fargate-task-definition: persist RunnerCloudResource from primitive output.
runner.environment-provision-fargate-task-definition__pre	Atomic	Pre step for runner.environment-provision-fargate-task-definition: load RunnerGroup and derive primitive inputs.
runner.environment-provision-gcp	Dag	Provision GCP/GCE environment for a runner group
runner.environment-provision-kubernetes	Dag	Provision Kubernetes runner workloads for a runner group
runner.environment-reconcile	Dag	Reconcile ECS/Fargate environment drift for a runner group
runner.environment-scale-azure-vmss	Dag	Set the capacity of the Azure VMSS backing a runner group (native scale).
runner.environment-scale-azure-vmss__post	Atomic	Post step for runner.environment-scale-azure-vmss: forward primitive output.
runner.environment-scale-azure-vmss__pre	Atomic	Pre step for runner.environment-scale-azure-vmss: load RunnerGroup and derive primitive inputs.
runner.environment-scale-ec2-asg	Dag	Set the desired capacity of the EC2 Auto Scaling Group for a runner group.
runner.environment-scale-ec2-asg__post	Atomic	Post step for runner.environment-scale-ec2-asg: forward primitive output.
runner.environment-scale-ec2-asg__pre	Atomic	Pre step for runner.environment-scale-ec2-asg: load RunnerGroup and derive primitive inputs.
runner.environment-scale-gce	Dag	Set the target size of the GCE MIG backing a runner group (native scale).
runner.environment-scale-gce__post	Atomic	Post step for runner.environment-scale-gce: forward primitive output.
runner.environment-scale-gce__pre	Atomic	Pre step for runner.environment-scale-gce: load RunnerGroup and derive primitive inputs.
runner.environment-scale-gcp-mig	Dag	Resize the GCE managed instance group for a runner group.
runner.environment-scale-gcp-mig__post	Atomic	Post step for runner.environment-scale-gcp-mig: forward primitive output.
runner.environment-scale-gcp-mig__pre	Atomic	Pre step for runner.environment-scale-gcp-mig: load RunnerGroup and derive primitive inputs.
runner.environment-update	Linear	Update ECS/Fargate environment for a runner group
runner.environment-update-azure-container-apps	Linear	Update Azure Container Apps environment for a runner group
runner.environment-update-cloud-run	Linear	Update Cloud Run environment for a runner group
runner.environment-update-do-app-job	Linear	Update DigitalOcean App Job environment for a runner group
runner.environment-update-ec2	Dag	Update the AWS EC2 Auto Scaling Group runner environment for a runner group.
runner.environment-update-ec2-asg	Dag	Re-apply the EC2 Auto Scaling Group config for a runner group (upsert flavour).
runner.environment-update-ec2-asg__post	Atomic	Post step for runner.environment-update-ec2-asg: persist RunnerCloudResource from primitive output.
runner.environment-update-ec2-asg__pre	Atomic	Pre step for runner.environment-update-ec2-asg: load RunnerGroup and derive primitive inputs.
runner.environment-update-ec2-launch-template	Dag	Re-apply the EC2 launch template for a runner group (upsert flavour).
runner.environment-update-ec2-launch-template__post	Atomic	Post step for runner.environment-update-ec2-launch-template: persist RunnerCloudResource from primitive output.
runner.environment-update-ec2-launch-template__pre	Atomic	Pre step for runner.environment-update-ec2-launch-template: load RunnerGroup and derive primitive inputs.
runner.environment-update-ec2-vm	Dag	Re-apply the raw EC2 VM environment for a runner group
runner.environment-update-gcp	Linear	Update GCP/GCE environment for a runner group
runner.environment-update-kubernetes	Linear	Update Kubernetes runner workloads for a runner group
runner.environment.azure-containerapps.delete-environment	Dag	Delete the Azure Container Apps managed environment for a runner group (only when exclusively owned).
runner.environment.azure-containerapps.delete-environment__post	Atomic	Post step for runner.environment.azure-containerapps.delete-environment: mark RunnerCloudResource deleted.
runner.environment.azure-containerapps.delete-environment__pre	Atomic	Pre step for runner.environment.azure-containerapps.delete-environment: load RunnerGroup and derive primitive inputs.
runner.environment.azure-containerapps.delete-job	Dag	Delete the Azure Container Apps Job backing a runner group.
runner.environment.azure-containerapps.delete-job__post	Atomic	Post step for runner.environment.azure-containerapps.delete-job: mark RunnerCloudResource deleted.
runner.environment.azure-containerapps.delete-job__pre	Atomic	Pre step for runner.environment.azure-containerapps.delete-job: load RunnerGroup and derive primitive inputs.
runner.environment.do_app_job.delete-app	Dag	Delete the DigitalOcean App Platform app for a runner group.
runner.environment.do_app_job.delete-app-job	Dag	Delete the DigitalOcean App Platform Job component for a runner group.
runner.environment.do_app_job.delete-app-job__post	Atomic	Post step for runner.environment.do_app_job.delete-app-job: mark RunnerCloudResource deleted.
runner.environment.do_app_job.delete-app-job__pre	Atomic	Pre step for runner.environment.do_app_job.delete-app-job: load RunnerGroup and derive primitive inputs.
runner.environment.do_app_job.delete-app__post	Atomic	Post step for runner.environment.do_app_job.delete-app: mark RunnerCloudResource deleted.
runner.environment.do_app_job.delete-app__pre	Atomic	Pre step for runner.environment.do_app_job.delete-app: load RunnerGroup and derive primitive inputs.
runner.environment.ecs.delete-cluster	Dag	Delete the ECS cluster of a Fargate/ECS runner group (final teardown step).
runner.environment.ecs.delete-cluster__post	Atomic	Post step for runner.environment.ecs.delete-cluster: mark RunnerCloudResource deleted.
runner.environment.ecs.delete-cluster__pre	Atomic	Pre step for runner.environment.ecs.delete-cluster: load RunnerGroup and derive primitive inputs.
runner.environment.ecs.delete-service	Dag	Drain and delete the ECS service backing a Fargate/ECS runner group.
runner.environment.ecs.delete-service__post	Atomic	Post step for runner.environment.ecs.delete-service: mark RunnerCloudResource deleted.
runner.environment.ecs.delete-service__pre	Atomic	Pre step for runner.environment.ecs.delete-service: load RunnerGroup and derive primitive inputs.
runner.environment.ecs.deregister-task-definition	Dag	Deregister the ECS task definition for a Fargate/ECS runner group.
runner.environment.ecs.deregister-task-definition__post	Atomic	Post step for runner.environment.ecs.deregister-task-definition: mark RunnerCloudResource deleted.
runner.environment.ecs.deregister-task-definition__pre	Atomic	Pre step for runner.environment.ecs.deregister-task-definition: load RunnerGroup and derive primitive inputs.
runner.execution-claim-next	Atomic	Atomically claim the next eligible DevKit coding execution.
runner.execution-claim-watch	Atomic	Watch for runner job claim; timeout → RUNNER_NEVER_CLAIMED
runner.execution-complete	Atomic	Complete an owned DevKit execution with a bounded terminal summary.
runner.execution-heartbeat	Atomic	Heartbeat an owned DevKit execution and advance its workspace phase.
runner.execution-launch	Linear	Launch one runner execution on ECS/Fargate
runner.execution-launch-agent	Linear	Launch one LTInteg agent execution on ECS/Fargate
runner.execution-launch-azure-container-apps	Linear	Launch one runner execution on Azure Container Apps Jobs
runner.execution-launch-azure-container-apps-generic	Linear	Launch one generic command execution on Azure Container Apps Jobs
runner.execution-launch-azure-vm	Linear	Launch one runner execution on an Azure Virtual Machine
runner.execution-launch-azure-vm-generic	Linear	Launch one generic command execution on an Azure Virtual Machine
runner.execution-launch-azure-vmss	Linear	Launch one runner execution on an Azure VM Scale Set.
runner.execution-launch-azure-vmss-generic	Linear	Launch one generic command execution on an Azure VM Scale Set.
runner.execution-launch-cloud-run	Linear	Launch one runner execution on Cloud Run
runner.execution-launch-cloud-run-generic	Linear	Launch one generic command execution on Cloud Run
runner.execution-launch-cloud-run-gitlab	Linear	Launch one GitLab CI runner execution on Cloud Run
runner.execution-launch-do-app-job-generic	Linear	Launch a generic runner execution on DigitalOcean App Platform Jobs
runner.execution-launch-do-droplet	Linear	Launch one runner execution on a DigitalOcean Droplet
runner.execution-launch-do-droplet-generic	Linear	Launch one generic command execution on a DigitalOcean Droplet
runner.execution-launch-ec2	Linear	Launch one runner execution on EC2 Auto Scaling
runner.execution-launch-ec2-vm	Linear	Launch one runner execution on a raw EC2 VM
runner.execution-launch-ec2-vm-generic	Linear	Launch one generic command execution on a raw EC2 VM
runner.execution-launch-gcp	Linear	Launch one runner execution on GCE
runner.execution-launch-gcp-generic	Linear	Launch one generic command execution on GCE
runner.execution-launch-generic	Linear	Launch one generic command execution on ECS/Fargate
runner.execution-launch-kubernetes	Linear	Launch one ephemeral GitHub Actions runner execution as a Kubernetes Job
runner.execution-launch-kubernetes-agent	Linear	Launch one LTInteg agent execution as a Kubernetes Job
runner.execution-launch-kubernetes-generic	Linear	Launch one generic command execution as a Kubernetes Job
runner.execution-launch-mgc-vm	Linear	Launch one runner execution on a Magalu Cloud VM
runner.execution-launch-mgc-vm-generic	Linear	Launch one generic command execution on a Magalu Cloud VM
runner.execution-logs-sync	Linear	Sync CloudWatch logs metadata for a runner execution
runner.execution-logs-sync-azure-container-apps	Linear	Sync logs metadata for an Azure Container Apps runner execution
runner.execution-logs-sync-azure-vm	Linear	Fetch Boot Diagnostics serial log for an Azure VM runner execution
runner.execution-logs-sync-azure-vmss	Atomic	Sync logs metadata for an Azure VM Scale Set runner execution.
runner.execution-logs-sync-cloud-run	Linear	Sync logs metadata for a Cloud Run runner execution
runner.execution-logs-sync-do-app-job	Linear	Sync logs for a DigitalOcean app job execution
runner.execution-logs-sync-do-droplet	Linear	Stub DO Droplet log-sync workflow. Returns no events until a DigitalOcean console / log transformer is added to ltinteg-ltip-proto.
runner.execution-logs-sync-ec2-vm	Linear	Fetch CloudWatch logs for an EC2 VM runner execution
runner.execution-logs-sync-gcp	Linear	Sync logs metadata for a GCE runner execution
runner.execution-logs-sync-kubernetes	Linear	Sync Kubernetes pod logs for a runner execution
runner.execution-logs-sync-mgc-vm	Linear	Fetch Magalu VM serial console output for a runner execution
runner.execution-reconcile-stale-claims	Atomic	Atomically fence stale coding claims while retaining exact Git ownership for safe recovery.
runner.execution-reconciliation-plan	Atomic	Async reconciliation plan for one runner execution (DB + cloud)
runner.execution-restart	Linear	Restart a runner execution on ECS/Fargate
runner.execution-restart-azure-container-apps	Linear	Restart a runner execution on Azure Container Apps Jobs
runner.execution-restart-azure-container-apps-generic	Linear	Restart a generic command execution on Azure Container Apps Jobs
runner.execution-restart-azure-vm	Linear	Restart a runner execution on an Azure VM
runner.execution-restart-azure-vmss	Atomic	Restart a runner execution on an Azure VM Scale Set.
runner.execution-restart-cloud-run	Linear	Restart a runner execution on Cloud Run
runner.execution-restart-cloud-run-generic	Linear	Restart a generic command execution on Cloud Run
runner.execution-restart-do-droplet	Linear	Restart a runner execution on a DigitalOcean Droplet
runner.execution-restart-ec2-vm	Linear	Restart a runner execution on an EC2 VM
runner.execution-restart-gcp	Linear	Restart a runner execution on GCE
runner.execution-restart-mgc-vm	Linear	Restart a runner execution on a Magalu Cloud VM
runner.execution-retry-ready	Atomic	Acknowledge safe local cleanup and launch replacement Git work.
runner.execution-retry-reject	Atomic	Reject a pending safe retry without releasing Git ownership.
runner.execution-safe-retry	Atomic	Request a DevKit retry that waits for authenticated local cleanup.
runner.execution-secret-stage-gcp	Linear	Stage runner environment values into GCP Secret Manager and return secretKeyRef references
runner.execution-secrets-purge	Atomic	Purge secret-bearing keys (environment, last_logs, inferred_failure_reason, log_next_page_token) from a runner execution's metadata. Targets a single execution or a runner group (optionally time-bounded). Org-scoped from the Bearer token, idempotent, and audited via an execution_secrets_purged group event.
runner.execution-stop	Linear	Stop a runner execution on ECS/Fargate
runner.execution-stop-azure-container-apps	Linear	Stop a runner execution on Azure Container Apps Jobs
runner.execution-stop-azure-vm	Linear	Stop a runner execution on an Azure VM
runner.execution-stop-azure-vmss	Atomic	Stop a runner execution on an Azure VM Scale Set.
runner.execution-stop-cloud-run	Linear	Stop a runner execution on Cloud Run
runner.execution-stop-do-app-job	Linear	Stop a runner execution on DigitalOcean App Platform Jobs
runner.execution-stop-do-droplet	Linear	Stop a runner execution on a DigitalOcean Droplet
runner.execution-stop-ec2-vm	Linear	Stop a runner execution on an EC2 VM
runner.execution-stop-gcp	Linear	Stop a runner execution on GCE
runner.execution-stop-kubernetes	Linear	Stop a Kubernetes runner execution by deleting its Job
runner.execution-stop-mgc-vm	Linear	Stop a runner execution on a Magalu Cloud VM
runner.execution-sync	Linear	Sync runner execution state from ECS
runner.execution-sync-azure-container-apps	Linear	Sync runner execution state from Azure Container Apps Jobs
runner.execution-sync-azure-vm	Linear	Sync runner execution state from an Azure VM
runner.execution-sync-azure-vmss	Atomic	Sync runner execution state from an Azure VM Scale Set.
runner.execution-sync-cloud-run	Linear	Sync runner execution state from Cloud Run
runner.execution-sync-do-app-job	Linear	Sync runner execution state from DigitalOcean App Platform Jobs
runner.execution-sync-do-droplet	Linear	Sync runner execution state from a DigitalOcean Droplet
runner.execution-sync-ec2-vm	Linear	Sync runner execution state from an EC2 VM
runner.execution-sync-gcp	Linear	Sync runner execution state from GCE
runner.execution-sync-kubernetes	Linear	Sync runner execution state from Kubernetes Job and Pod status
runner.execution-sync-mgc-vm	Linear	Sync runner execution state from a Magalu Cloud VM
runner.execution-sync-stale-cloud-run	Linear	Start Cloud Run execution-sync workflows for active runner rows that may be stale
runner.execution-sync-stale-gcp	Linear	Start GCE execution-sync workflows for active runner rows that may be stale
runner.execution-sync-stale-kubernetes	Linear	Start Kubernetes execution-sync workflows for active runner rows that may be stale
runner.finalize_acr_registry_mirror	Atomic	Commit READY status on the AcrRegistryMirror row
runner.finalize_azure_container_apps_environment	Atomic	Finalize Azure Container Apps runner provisioning: read the job back and mark the runner group ACTIVE.
runner.finalize_cloud_run_environment	Linear	Finalize Cloud Run runner environment provisioning
runner.finalize_cloud_run_registry_mirror	Linear	Commit READY status on the CloudRunRegistryMirror row
runner.finalize_ec2_environment	Linear	Finalize EC2 runner environment provisioning
runner.finalize_ec2_environment_deletion	Linear	Finalize EC2 runner environment deletion
runner.finalize_ec2_vm_environment	Linear	Finalize raw EC2 VM runner environment provisioning
runner.finalize_ec2_vm_environment_deletion	Linear	Finalize raw EC2 VM runner environment deletion
runner.finalize_environment	Linear	Finalize runner ECS environment provisioning
runner.finalize_environment_deletion	Linear	Finalize runner ECS environment deletion
runner.finalize_gcp_environment	Linear	Finalize runner GCP environment provisioning
runner.finalize_gcp_environment_deletion	Linear	Finalize GCP environment deletion
runner.finalize_kubernetes_environment	Linear	Finalize Kubernetes runner provisioning
runner.finalize_kubernetes_environment_deletion	Linear	Finalize Kubernetes environment deletion
runner.gcp-ensure-instance-template	Dag	Ensure the GCE instance template backing a runner group's MIG.
runner.gcp-ensure-instance-template__post	Atomic	Post step for runner.gcp-ensure-instance-template: persist RunnerCloudResource from primitive output.
runner.gcp-ensure-instance-template__pre	Atomic	Pre step for runner.gcp-ensure-instance-template: load RunnerGroup and derive primitive inputs.
runner.gcp.compute.instance_group_manager.delete	Dag	Delete the GCE managed instance group for a runner environment.
runner.gcp.compute.instance_group_manager.delete__post	Atomic	Post step for runner.gcp.compute.instance_group_manager.delete: mark RunnerCloudResource deleted.
runner.gcp.compute.instance_group_manager.delete__pre	Atomic	Pre step for runner.gcp.compute.instance_group_manager.delete: load RunnerGroup and derive primitive inputs.
runner.gcp.compute.instance_template.delete	Dag	Delete the GCE instance template for a runner environment.
runner.gcp.compute.instance_template.delete__post	Atomic	Post step for runner.gcp.compute.instance_template.delete: mark RunnerCloudResource deleted.
runner.gcp.compute.instance_template.delete__pre	Atomic	Pre step for runner.gcp.compute.instance_template.delete: load RunnerGroup and derive primitive inputs.
runner.git-work-recovery-entrypoint	Atomic	Request exact same-runner recovery for retained retryable Git work, or continue to the Staff coding actor when no recovery is required.
runner.github-runner-group.add-existing-runners	Atomic	Associate already-registered GitHub organization runners with an existing GitHub runner group without creating or deleting runners
runner.github-runner-group.bind-existing	Atomic	Bind an existing GitHub organization runner group onto an Orkestia runner group without creating, moving, or recreating runners
runner.grant_acr_credential_set_secret_access	Atomic	Ensure the ACR credential set identity can read the mirror secrets
runner.grant_ar_service_agent_secret_access	Linear	Ensure the AR service agent has secretAccessor on the mirror secret
runner.group-creation	Dag	Creates and provisions a runner group: persists the row from the supplied domain fields (or provisions an existing one when runner_group_uuid is given), then provisions all its infrastructure
runner.group-creation-abort	Dag	Abort a stuck runner group creation: force-fail in-flight workflow + reset status
runner.group-creation-abort.force-fail	Atomic	Transition a stuck runner group's active workflow to failed (best-effort)
runner.group-creation.finalize	Atomic	Mark the runner group ACTIVE after the per-backend provision DAG finishes
runner.group-creation.prepare	Atomic	Ensure the runner group row exists (create it from the domain inputs when no runner_group_uuid is supplied), validate cloud + GitHub connections, and publish routing keys for the creation DAG
runner.group-deletion	Dag	Deletes all infrastructure for a runner group
runner.group-deletion.deregister	Atomic	Deregister GitHub runners and publish routing keys for the deletion DAG
runner.group-deletion.finalize	Atomic	Soft-delete the runner group row and emit a deletion_completed event
runner.group-reset-status	Atomic	Reset a runner group's cached status to ERROR and clear its active workflow reference (recovery primitive for stuck creations).
runner.group-set-container-image	Linear	Set runner_group.config.container_image and, for ECS-backed groups, re-register the task definition so the next launch picks up the image.
runner.group-update	Dag	Update editable runner-group settings and, for coding-enabled DevKit or Orkestia-hosted Kubernetes/Azure VM agent groups, reconcile customer artifact storage first
runner.group-update.apply	Atomic	Apply the validated editable runner-group patch
runner.group-update.finalize	Atomic	Finalize a runner-group update after storage and row mutation
runner.group-update.prepare	Atomic	Resolve and validate effective coding storage settings
runner.health-check	Linear	Performs health check on a runner group, syncing AWS and GitHub status
runner.health-check-kubernetes	Linear	Sync runner group status from Kubernetes Deployment or ephemeral executions
runner.hosted-tenant-disable	Atomic	Disable Orkestia-hosted runners for an organization: refuse while work is in flight, scale the pool to zero, clear the org's default runner group and mark the hosted group deleted.
runner.hosted-tenant-provision	Atomic	Enable Orkestia-hosted runners for an organization: create the hosted runner group, point the org's agent settings at it, tighten the session quotas for platform-paid compute, and trigger the first warm-pool reconcile. Idempotent — re-enabling returns the existing pool.
runner.hosted-usage-reconcile	Atomic	Meter Orkestia-hosted runner usage and enforce the wall clock: stop any hosted execution past the organization's max_session_duration_s, and write one BillableEvent per newly-terminal execution carrying its duration. Idempotent per tick.
runner.instance-drain	Atomic	Drain a DevKit runner instance without revoking active assignments.
runner.instance-evict	Atomic	Drain a single runner instance (PENDING/IDLE/BUSY → DRAINING). Org-scoped. Reason is recorded on the transition event. Idempotent on already-terminal instances.
runner.instance-heartbeat	Atomic	Heartbeat a DevKit runner instance and refresh safe protocol metadata.
runner.instance-register	Atomic	Register a provider-blind DevKit runner instance and negotiate protocol v2.
runner.instance-resume	Atomic	Resume a DevKit runner after its own local-shutdown drain without overriding an operator-requested drain.
runner.instance-terminate-azure-vm	Atomic	Terminate a warm-pool Azure VM runner instance: best-effort GitHub deregistration, LTIP VM delete confirmed by polling describe until NOT_FOUND, per-instance NIC delete, then RunnerInstance TERMINATED. Fails without marking the row when the VM cannot be confirmed gone.
runner.instance-terminate-ec2-vm	Atomic	Terminate one runner instance — deregister from GitHub (best-effort), terminate the EC2 VM via LTIP (best-effort), and mark the RunnerInstance row TERMINATED with a reason. Counterpart to runner.execution-stop-ec2-vm but instance-scoped.
runner.instance-terminate-fargate	Atomic	Terminate one warm Fargate runner instance — deregister from GitHub (best-effort), stop the paired ECS task via runner.execution-stop, and mark the RunnerInstance row TERMINATED with a reason. Instance-scoped counterpart to runner.execution-stop.
runner.instance-terminate-gce	Atomic	Terminate one GCE runner instance — deregister from GitHub (best-effort), delete the Compute Engine VM via LTIP across the group's configured zones (best-effort), and mark the RunnerInstance row TERMINATED with a reason. Counterpart to runner.instance-terminate-ec2-vm.
runner.instance-terminate-kubernetes	Atomic	Terminate one warm Orkestia-hosted Kubernetes runner instance — delete the pod and mark the RunnerInstance row TERMINATED with a reason. Instance-scoped counterpart to runner.execution-stop-kubernetes, used by the warm-pool controller to reap idle pods that have no execution.
runner.integration-test.complete	Atomic	Complete one redeemed integration test with exit and result digests only; command output and credentials are never accepted.
runner.integration-test.dispatch	Atomic	Dispatch one exact integration test into a credential-isolated Kubernetes Job and return secretless status evidence.
runner.integration-test.redeem	Atomic	Redeem one immutable post-LLM integration test and its one-time organization-scoped credential envelope.
runner.integration-test.status	Atomic	Observe one isolated integration-test Job and return secretless digest evidence.
runner.load_ec2_environment	Linear	Load EC2 runner environment state
runner.load_ec2_vm_environment	Linear	Load raw EC2 VM runner environment state
runner.load_environment	Linear	Load runner ECS environment state
runner.load_gcp_environment	Linear	Load GCP runner environment state
runner.load_kubernetes_environment	Linear	Load Kubernetes runner environment state
runner.pool-drain	Atomic	Drain every alive runner instance in a warm-pool group (PENDING/IDLE/BUSY → DRAINING). BUSY instances finish their current job first. Org-scoped. Reason is recorded on each instance's transition event for audit.
runner.pool-launch-fargate	Linear	Launch one warm (non-ephemeral) runner on ECS Fargate and record it as a RunnerInstance. Started by runner.pool-reconcile-fargate when the warm pool is below its floor; the runner stays registered with GitHub and serves multiple jobs until reaped.
runner.pool-launch-kubernetes	Atomic	Launch one warm (non-ephemeral) Orkestia-hosted runner as a Kubernetes pod and record it as a RunnerInstance in PENDING, so the warm-pool controller can see it before the runner finishes registering.
runner.pool-reconcile	Atomic	Atomic adapter for runner.pool-reconcile; required by parent workflow specs: runners.pool.create-github-autoscaling, runners.pool.migrate-provider, runners.pool.resize-and-drain.
runner.pool-reconcile-azure-vm	Linear	Controller reconcile loop for warm-pool runner groups on Azure VMs. Observes GitHub (via LTIP) + ARM + the engine DB every tick and converges the pool toward min_warm_idle / max_count. Idempotent; safe to run on a stable workflow_id per group.
runner.pool-reconcile-ec2-vm	Linear	Controller reconcile loop for warm-pool runner groups on EC2. Observes GitHub (via LTIP) + AWS EC2 + the engine DB every tick and converges the pool toward min_warm_idle / max_count. Replaces the event-driven scale-check + manual pool-sweep model. Idempotent; safe to run on a stable workflow_id per group.
runner.pool-reconcile-fargate	Linear	Controller reconcile loop for warm-pool runner groups on ECS Fargate. Observes GitHub + ECS tasks + the engine DB every tick and converges the pool toward min_warm_idle / max_count. A warm runner is an idle, non-ephemeral ECS task. Idempotent; safe to run on a stable workflow_id per group.
runner.pool-reconcile-gce	Linear	Controller reconcile loop for warm-pool runner groups on Google Compute Engine. Observes GitHub (via LTIP) + GCE + the engine DB every tick and converges the pool toward min_warm_idle / max_count. Idempotent; safe to run on a stable workflow_id per group.
runner.pool-reconcile-kubernetes	Linear	Controller reconcile loop for Orkestia-hosted Kubernetes warm pools. Observes pods + the engine DB every tick and converges the pool toward min_warm_idle / max_count using pending executions as the demand signal. A warm runner is an idle pod polling for a claim. Idempotent; safe to run on a stable workflow_id per group.
runner.pool-rotate	Atomic	Drain every alive runner instance in a warm-pool group + nudge the per-group reconcile workflow so the controller re-launches to the floor on its next tick. Use for AMI rotation / hygiene-config rollout / emergency replacement.
runner.pool-sweep-ec2-vm	Atomic	[DEPRECATED — superseded by runner.pool-reconcile-ec2-vm (ADR-017, P5.T3)] Legacy periodic reconciliation for warm-pool runner groups on EC2: cloud state, provisioning timeout, age cap, idle TTL, GitHub heartbeat, orphan cleanup, drained-instance termination, scale-check top-up. No longer scheduled by any cron; remains in the registry only so in-flight calls finish. New code must use runner.pool-reconcile-ec2-vm.
runner.provision_gcp_workload	Linear	Persist GCE MIG resource metadata for runners
runner.provision_kubernetes_workloads	Linear	Create Kubernetes Secret and Deployment for runners
runner.register_ec2_task_definition	Linear	Register ECS task definition for EC2 runner environment
runner.register_github_runner_group	Linear	Create GitHub runner group for the runner group
runner.register_task_definition	Linear	Register ECS task definition for runner environment
runner.registration-token-resolve	Linear	Resolve a runner registration token without direct SSM clients
runner.repository-profile.activate	Atomic	Activate one execution-profile version and retire its predecessor.
runner.repository-profile.adopt-source	Atomic	Adopt a repository's committed execution-profile document as its active universal-runtime profile, without an environment build.
runner.repository-profile.create	Atomic	Create an immutable provider-blind repository execution profile.
runner.repository-profile.retire	Atomic	Retire a repository execution-profile version.
runner.resize_instance_group	Dag	Resize a GCE managed instance group to the desired capacity for a runner group.
runner.resize_instance_group__post	Atomic	Post step for runner.resize_instance_group: forward primitive output.
runner.resize_instance_group__pre	Atomic	Pre step for runner.resize_instance_group: load RunnerGroup and derive primitive inputs.
runner.resolve_ecs_optimized_ami	Dag	Resolve the ECS-optimized AMI ID from SSM or config override.
runner.resolve_ecs_optimized_ami__post	Atomic	Merge override or primitive output into ami_ref.
runner.resolve_ecs_optimized_ami__pre	Atomic	Derive SSM parameter path or detect ami_id override.
runner.runner-disk-prune-ec2-vm	Linear	Run docker-prune and workspace-temp cleanup on a warm-pool EC2 VM runner via SSM. Fire-and-forget hook called from execution-stop to keep disk-pressure flat between jobs (ADR-018).
runner.scale-check-group	Atomic	Reconcile active executions for a runner group, then launch enough runners to satisfy max(min_count, demand) up to max_count. min_count is the warm-pool floor — runners kept registered with GitHub so incoming jobs claim them instantly instead of paying the cold-start cost. Called on webhook arrival, on execution-stop completion (queue-drain chain), and from periodic sweeps. Self-healing via execution-claim-watch timeout.
runner.scaling	Linear	Scales a runner group to a new desired count
runner.scaling-kubernetes	Linear	Scale Kubernetes runner Deployment replicas
runner.set_log_group_retention	Dag	Apply the configured CloudWatch retention policy to a runner log group.
runner.set_log_group_retention__post	Atomic	Post step for runner.set_log_group_retention: forward primitive output.
runner.set_log_group_retention__pre	Atomic	Pre step for runner.set_log_group_retention: load RunnerGroup and derive primitive inputs.
runner.software-delivery.cleanup-execution-log	Dag	Delete provider runtime logs, Lumen traces, workflow payload history, and main-database execution payloads, then atomically finalize the exact Tickets cleanup task
runner.software-delivery.cleanup-execution-log-claim-prepare	Linear	Validate one execution-log cleanup claim before dispatch
runner.software-delivery.cleanup-execution-log-dispatch	Dag	Claim the oldest due execution-log retention task and run its durable multi-store cleanup controller
runner.software-delivery.cleanup-execution-log-main-store	Linear	Minimize main-database execution-log payloads under one exact leased software-delivery cleanup task and return a non-final receipt
runner.software-delivery.cleanup-execution-log-provider-runtime	Linear	Delete and verify provider-runtime log sources for one exact software-delivery cleanup claim
runner.software-delivery.cleanup-execution-log-workflow-history	Linear	Minimize workflow state, event, and scheduled-input payloads under one exact leased software-delivery cleanup task and return a non-final receipt
runner.stop_active_executions_ec2	Linear	Check for active executions before EC2 environment deletion
runner.stop_active_executions_ec2_vm	Linear	Check for active executions before raw EC2 VM environment deletion
runner.update_gcp_environment	Linear	Update GCP runner environment metadata
runner.update_task_definition	Linear	Update runner ECS task definition
runner.validate_acr_registry_mirror	Atomic	Resolve mirror coordinates and prepare the mirror row
runner.validate_cloud_run_environment	Linear	Validate Cloud Run runner environment inputs
runner.validate_cloud_run_registry_mirror	Linear	Resolve mirror coordinates and prepare the mirror row
runner.validate_ec2_environment	Linear	Validate EC2 runner environment inputs
runner.validate_ec2_vm_environment	Linear	Validate raw EC2 VM runner environment inputs
runner.validate_environment	Linear	Validate ECS runner environment inputs
runner.validate_gce_network	Linear	Validate GCE VPC network egress for runner instances
runner.validate_gcp_environment	Linear	Validate GCP runner environment inputs
runner.validate_kubernetes_environment	Linear	Validate Kubernetes runner environment inputs
runner.verify_acr_registry_mirror	Atomic	Confirm the ACR cache rule is present and reflects our config
runner.verify_cloud_run_registry_mirror	Linear	Confirm the AR remote repository is reachable and reflects our config
runner.verify_environment	Linear	Verify ECS runner environment against AWS provider state
runner.workspace-lease-settle	Atomic	Settle orphaned workspace leases for one runner group: abandon any non-terminal lease whose runner instance is terminal, or whose holder cannot be resolved while the lease's own heartbeat is stale past the group timeout. Abandonment only, idempotent, bounded per tick.
runner.workspace-lease.claim	Atomic	Claim one requested workspace lease for an opaque trusted executor UUID.
runner.workspace-lease.complete	Atomic	Finalize a workspace lease as completed, blocked, failed, or abandoned.
runner.workspace-lease.heartbeat	Atomic	Heartbeat a claimed lease and monotonically advance its lifecycle.
runner.workspace-lease.request	Atomic	Request provider-blind workspace ownership for a Staff Actor's agent session and runner execution using an existing ticket Git-work binding.