Trusted workers

Every worker is bound to a WorkOS user and tenant, device identity, worker key, capability set, allowed workspace roots, execution policy, and heartbeat.

Early access proves one canonical Mac seat worker first. Linux, Windows, private VM, and managed cloud workers must implement the same protocol instead of introducing parallel host systems.

The server preserves jobs, events, artifacts, and checkpoints. A different worker may resume only when it has the workspace, provider authorization, required capabilities, and explicit policy.