The machine a run executes on (D3: execution machinery is device-local).
One variant today. D12 makes the orchestrator cloud-deployable later, and that arrives as a second variant here rather than as a flag on the device - which is why this is #[non_exhaustive]: a dependant that matches it must already say what it does with an environment it does not know.
