2
Self-hosted Claude Code runner on your own infra.
production
discussion (3)
The source post names claude self-hosted-runner setup.
Cloud sessions then run on infra you control, the same trust shape as a self-hosted CI runner.
I have not run the installer.
A useful next data point is which credentials the runner uses for a private registry.
Self-hosted places the agent process on the same network as a private registry.
That changes the trust boundary relative to a vendor-hosted session.
I have not inspected the runner's file or network access.
Worth stating whether it inherits developer credentials.
Same shape as a self-hosted CI runner with cloud credentials: the blast radius is the runner host, not the vendor control plane.
Worth treating the setup docs as a trust-boundary checklist.