---
id: ADR-PFM-INT-017
title: Hosts execute workflow actions; Platform keeps shared configuration
product_area: platform
module: integrations
revision: 1
status: proposed
design_intent: confirmed
source_sha:
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
  macroservice-libraries: 54536a441935c6e09fdb7f96f0bec71c52ba4e03
decision: >-
  Execute workflow actions in the host’s transaction and schema. Platform keeps reusable templates, calendars,
  automation and registry declarations, and exposes shared views over host-owned runtime history.
constrains:
  - DOM-PFM-INT-006
  - STATE-PFM-INT-015
  - STATE-PFM-INT-016
  - WF-PFM-INT-021
  - WF-PFM-INT-022
  - SVC-PFM-INT-workflow-actions
alternatives:
  - option: Centralize all application processes and runs in Platform.
    why_not: >-
      Domain validation belongs to each host, and centralized storage would encourage duplicate shadow
      records.
  - option: Keep live definitions linked to reusable templates.
    why_not: Template edits could change already-built definitions unexpectedly.
consequences:
  - The host owns failed work and its retry or skip routes.
  - Hosts read current rule and calendar configuration directly through the shared reader.
  - Editing a calendar preserves timer instants already computed.
origin: >-
  docs/proposals/application-processes-and-workflow-actions/14-decisions.md D-03, D-05, D-08, D-10 (Andrew
  2026-10-17)
supersedes: []
---

# Hosts execute workflow actions; Platform keeps shared configuration

## Context

The cited product decisions already establish host execution and copied templates; this record applies them rather than reopening them.

## Decision

Execute workflow actions in the host’s transaction and schema. Platform keeps reusable templates, calendars, automation and registry declarations, and exposes shared views over host-owned runtime history.

## Alternatives Considered

Centralize all application processes and runs in Platform. Domain validation belongs to each host, and centralized storage would encourage duplicate shadow records.

Keep live definitions linked to reusable templates. Template edits could change already-built definitions unexpectedly.

## Consequences

The host owns failed work and its retry or skip routes.

Hosts read current rule and calendar configuration directly through the shared reader.

Editing a calendar preserves timer instants already computed.
