A build of one check-in, holding no credential: its files, the project's gate crystal run ci.cr at low priority, the end of what it printed posted where the run is, and its node's ci verdict, pass or fail, on that check-in. Every build is user builder's, which has no account, so its node runs one at a time. create adds the objective, the check-in (--of) and where the run is written (--to or --ticket). A user holding R may send one, from its own run's clone too, once ollama-node's owner allows in r-senders.json the network, these paths read and these limits.

{
  "node": "ollama-node",
  "workspace": [
    {"step": "directory", "at": "$$root$$/$$user$$/projects/$$project$$/$$run$$"},
    {"step": "files", "of": "trunk", "into": "$$workspace$$/tree"}
  ],
  "sandbox": {
    "uid": 1000, "gid": 1000, "capabilities": [], "network": true,
    "own_session": true, "ends_with_node": true,
    "read_only": ["/usr", "/bin", "/sbin", "/lib", "/lib64", "/etc/resolv.conf", "/etc/hosts",
                  "/etc/nsswitch.conf", "/etc/ssl", "/etc/pki"],
    "read_write": ["$$workspace$$"],
    "homes": [],
    "files": [{"at": "/etc/passwd", "text": "$$user$$:x:1000:1000::$$workspace$$:/bin/sh\n"}],
    "proc": "/proc", "dev": "/dev", "tmp": "/tmp"
  },
  "limits": {"wall": "1h", "processes": 4096},
  "process": {
    "user": "builder",
    "command": ["nice", "crystal", "run", "ci.cr"],
    "cwd": "$$tree$$",
    "env": {"HOME": "$$workspace$$", "USER": "$$user$$", "PATH": "/usr/local/bin:/usr/bin:/bin"},
    "keep": {"stdout_when": "always"},
    "verdict": true
  }
}