The Runner Is a Privilege-Separation Boundary, Not Just a Worker
Keeping host execution outside the portal containers limits what a web compromise can directly control.
Keeping host execution outside the portal containers limits what a web compromise can directly control.