Home / The model / The lexicon / host
host
the machine, container or account it runs as
A node carries no inherent meaning. What
host means here emerges from the edges traceable from it, and confidence in that meaning is proportional to how richly it is connected. It is connected to 8 of 23 primitives here. That, and not the sentence above, is what it means. The discipline this follows.What the shapes say host means, and they do not agree
These definitions are not merged, and that is the design. Merging two vocabularies erases the disagreement, and the disagreement is the finding. Each row below is owned by the shape that said it. A reader deciding what
host costs them has to read the row for the shape they run, not an average of the rows. Why vocabularies are bridged rather than merged.| The shape | Variant | What host means there |
|---|---|---|
| Claude Code on the web (a remote session container) | ccr-container | this container - ephemeral, the vendor's; not your machine |
| Claude Code (the CLI, on your own machine) | local-confirmations-off | your machine, as your user account |
| Claude Code (the CLI, on your own machine) | local-default | your machine, as your user account |
| Claude Desktop (a desktop app with local tools) | default | your machine, as your user account |
| Claude (in the browser, with connectors switched on) | connectors-on | what the drive connector is scoped to; not your machine |
| A browser extension with broad host permissions | broad-host-permissions | your browser - every page, every logged-in site |
| A scheduled job running as a service account | service-account | the server it runs on, as the service account |
| Actions runner (a hosted CI job) | ci | the runner - destroyed after the job; not your machine |
| ChatGPT (in the browser, no connectors) | default | the vendor's environment; not your machine |
That is the ABP's own argument in one column. The same word, the same grammar, and a materially different exposure depending on where the agent runs. It is why an ABP is about the deployment rather than the product.
The 8 primitives with this reach
| Primitive | Published gloss | Spelled out | Undo | In how many shapes |
|---|---|---|---|---|
create.schedule.host | Create something that outlives the turn where it runs (a cron, a service) | create.schedule.host | yes | 4 of 9 |
delete.file.host | Delete files anywhere the account can reach | delete.file.host | no | 4 of 9 |
execute.process.host | Run programs as the account | execute.process.host | with-effort | 6 of 9 |
read.credential.host | Read credentials stored where it runs | read.credential.host | no | 4 of 9 |
read.file.host | Read any file the account can reach | read.file.host | no | 7 of 9 |
read.record.browsing | Read every page you visit | read.record.host | no | 1 of 9 |
read.record.history | Read a retained record: shell history, past sessions | read.record.host | no | 4 of 9 |
write.file.host | Change any file the account can reach | write.file.host | with-effort | 6 of 9 |
How this node connects
| Edge | Reads as | To |
|---|---|---|
reachable_from | host is the reach of these 8 primitives | 8 capabilities |
reaches | the inverse, walked the other way, with different fan out | one capability at a time |