Project boundary
Members can see and run project resources. Owners and project or organization administrators control edits and deletion. The server enforces authorization on every API request.
Schedules
A schedule records the project, suite selection and execution policy. Device-backed jobs wait for an eligible lease instead of sharing the same device concurrently.
Run evidence
Each run has an isolated identity, status stream, artifacts and report publication path. Use the audit view for control-plane changes rather than placing secrets in logs.