Ephemeral runners

A build machine destroyed after every job cannot carry anything from one build to the next.

No leftover credentials, no persistence, no accumulated state for the next job to find. It removes a whole class of attack where one compromised build poisons subsequent ones, and it costs a little time per run. It is one of the cleanest trades available in pipeline security.