Recorded node evidence
NodeExecution
previewTruncated is true while the authoritative count remains visible; downstream nodes still receive the complete runtime result.
Redaction
Authorization, cookie, token, password, credential, and other protected fields are removed or redacted before ordinary logs and execution output. Webhook URLs and OAuth tokens remain inside host-owned connection handling.Remote checkpoints
The control plane appends a checkpoint after each completed node with execution/revision, node/version, attempt, result, input hash, output reference, side-effect class, idempotency key, completion time, and runner identity.(execution, node, attempt) is unique. Temporary browser session IDs are not resumable output references.