Hosted agent
Your own container, built with any framework: from an image, or from a source zip the platform builds.
1. The agent
The name workflows give: agent: <identifier>
Sent to the container with the task. The container's own code decides what it does with them.
Whatever model the container names, its calls reach this one, through the runner. Empty: the project's profile.
2. Its container
Under a registry the operator allows. The tag is resolved to its digest at publication, and runs pull that digest.
GET /readiness must answer by then.
The container holds no credential: it reaches the model, its MCP servers and the internet through the runner, on 127.0.0.1.
Still needed: a name and an identifier, an image.