What starts a run. Server triggers fire on the API host on their own; client triggers fire in a browser running your app.
Which ones a member can arm
A public-site workflow can be armed by cron, interval, schedule-once, manual and webhook. The rest — file watches, device events, database records — belong to an operator running their own Leumas instance, and each page says which it is.