Components
Script Program
Run bounded Python control logic through the restricted Site Runtime worker.
Script Program stores Python source with declared typed inputs, outputs and state. It executes through a separate restricted worker rather than inside the main Site Runtime process.
Execution boundary
The production worker requires a hardened Docker or Podman command and applies:
- an allowlisted Python subset;
- typed JSON input, output and state;
- a hard execution timeout;
- no network access;
- a read-only filesystem;
- dropped capabilities;
- bounded CPU, memory and process counts.
Deployment rejects Script Programs when the target Runtime has no validated worker configuration.
When to use it
Use Block Program for common visible automation logic and Script Program for bounded calculations that are clearer in code. Do not use Script Program as a general operating-system automation shell.