Linux Extract API
Run a narrow worker with explicit filesystem, network, and resource boundaries.

A focused use case
Process authorized files in a staging directory and publish validated JSON records to a destination with an auditable job lifecycle.
A practical workflow
Use a dedicated execution identity, controlled input and output paths, resource limits, and safe logging. Test interrupted jobs and cleanup instead of assuming a running process means a healthy pipeline.
An example record contract
These fields illustrate the decisions to make before implementation. Adapt the names and required values to the receiving system; the table is not a promise of a live endpoint or a provider-specific response.
| Example field | Meaning in this contract |
|---|---|
| job_id | Worker task identity |
| input_path | Approved staged input |
| extractor_revision | Tested parser revision |
| outcome | Completed or explicit failure |
Limits worth keeping visible
A container or Linux process is not secure by default. Limit privileges and verify host access, network reachability, and resource controls for the chosen runtime.
Before increasing the workload
Run a small, authorized test set through the whole path, including the receiving application. Keep accepted, rejected, and incomplete outcomes distinguishable. A result should retain the context needed to explain its meaning after it leaves the extractor.
Continue with Self-Host Extract API: Build an Operating Model for the full implementation discussion, and use the sample contract documentation to review the shape of a handoff.
Consult the source documentation for implementation details and current access conditions. The workflow above is an editorial planning pattern.
Connected topics.
Chrome Extract API
Plan a permissioned Chrome workflow with a small, visible page scope.
Explore the workflowSafari Extract API
Design Safari extraction around an explicit user action and a reviewed extension boundary.
Explore the workflowFirefox Extract API
Use a scoped WebExtension design and test the exact permission model you depend on.
Explore the workflow