Data residency summary

Data	Stored In	Accessed Via	Transits Control Plane?
Task definitions (spec metadata)	Control plane DB	ConnectRPC	Yes — metadata only
Run metadata (phase, timestamps)	Control plane DB	ConnectRPC	Yes
Action metadata (phase, attempts)	Control plane DB	ConnectRPC	Yes
Task inputs/outputs	Customer object store	Presigned URL	No — direct client ↔ object store
Code bundles	Customer object store	Presigned URL	No — direct client ↔ object store
Reports (HTML)	Customer object store	Presigned URL	No — direct client ↔ object store
Container images	Customer container registry	Pulled by K8s	No — stays in customer infra
Task logs	Customer log aggregator	Streamed via tunnel	Relayed in-memory (not stored)
Secrets	Customer secrets backend	Injected at runtime	Relayed during create (not stored)
Observability metrics	Customer ClickHouse	Proxied via DataProxy	Relayed in-memory (not stored)
User identity / RBAC	Control plane DB	ConnectRPC	Yes
Cluster state	Control plane DB	Internal	Yes