StaticinstanceThe process default: the worker queue read from the temporal namespace at each start.
Keyed by the buffer: a buffer closes once, so a second start while one is in flight is refused. A finished run releases the id.
Unique per invocation: a redeploy of the same tag is legitimate.
Shares its id with the post-deploy start, so a click during that run is refused.
The id is per program and network, so a double click is refused.
Starts the program register's operator workflows and publishes each accepted start. Nothing here signs: the worker holds the keys (PROGRAM_DEPLOYS.md §2.4). A refused start is
PROGRAM_RUN_IN_PROGRESS; a call that could not be made throws.