@early-needle-54791: a lot going on in the thread above, but the bit about "downloading a binary tool and then using it in an ExecuteProcessRequest" feels highly relevant... once your current PR is landed, would be good to ensure that's covered by the design doc