Managed storage and managed runtime

Sidekick ships with built-in defaults for storage and execution: managed artifacts holds generated docs, files, and export bundles in LumenFlow-managed storage, and managed runtime runs builder work when no external execution target is connected. You do not need external artifact storage before Sidekick can save internal outputs; public hosting and deployment still require a connected destination and explicit confirmation.

Two managed defaults#

Every workspace starts with two system-managed destinations that work out of the box:

DestinationWhat it stores or runsWhen it's used
Managed artifactsGenerated docs, files, export bundlesWhen no document_store or artifact_store connector is pinned
Managed runtimeBuilder execution (the work itself)When no external runtime is enrolled

Both are encrypted, workspace-isolated, and visible in the workspace evidence and artifact views.

When to use managed vs connected#

Managed defaults are the right choice when:

  • You're trying Sidekick for the first time and don't want to set up GitHub, Notion, or a runtime yet
  • The output is internal — drafts, summaries, exports, generated files — that doesn't need to live in a team-owned tool
  • You want everything in one governed place rather than scattered across third-party services

Connect external destinations when:

  • The output belongs in a team-owned source of truth (code in GitHub, docs in Notion, designs in Figma)
  • Your audit / compliance setup mandates retention in your own systems
  • You want Sidekick to use a runtime you already operate
  • You want a generated website or application deployed to public hosting

Switching destinations#

In Sidekick → Settings → Destination defaults, owners and admins can pin specific destinations per role (code, document store, artifact store, deployment host, runtime). Roles without a pinned destination fall back to the managed default where one exists.

Governance#

Managed storage inherits workspace-level encryption, role gates, and audit. There's no extra approval to use it — but Sidekick still records the artifact in the evidence trail so you can replay any action that produced it.

Managed artifact links are workspace-scoped. They are for review, download, preview, or export inside your workspace boundary. They are not public hosting links.

info If you're worried about "where did that file go?", the Evidence Vault shows every artifact Sidekick produced, where it landed, and the action that created it.