[damccorm]

Bind the Prism gRPC JobManagement listener to localhost:<port> instead of :<port>, matching the Web UI listener (web.go), the Endpoint() reporting, and the documented default.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 56.59%. Comparing base (12bbb17) to head (a01f848).
⚠️ Report is 60 commits behind head on master.

Additional details and impacted files

@@             Coverage Diff             @@
##           master   #40989       +/-   ##
===========================================
- Coverage   79.83%   56.59%   -23.24%     
===========================================
  Files         494      877      +383     
  Lines       83575   154949    +71374     
===========================================
+ Hits        66722    87698    +20976     
- Misses      16853    65391    +48538     
- Partials        0     1860     +1860     

Flag	Coverage Δ
go	29.06% <100.00%> (?)
python	80.08% <ø> (+0.25%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

Assigning reviewers:

R: @shunping for label go.
Backup reviewer: jrmccluskey (if the main reviewer is unresponsive, you can escalate to them by tagging their username)

Note: If you would like to opt out of this review, comment assign to next reviewer.

Available commands:

• stop reviewer notifications - opt out of the automated review tooling
• remind me after tests pass - tag the comment author after tests pass
• waiting on author - shift the attention set back to the author (any comment or push by the author will return the attention set to the reviewers)

The PR bot will only process comments in the main thread (not review comments).

[github-actions]

📋 Review Summary

This PR updates the Prism JobManagement gRPC server to bind to localhost:<port> instead of :<port> (all interfaces) by default, aligning its behavior with the Web UI listener and Endpoint() reporting. A unit test assertion is also added to TestServer_Lifecycle to verify that the listener binds to a loopback IP.

🔍 General Feedback

• Binding the local runner's unauthenticated gRPC service to loopback by default is a solid security improvement that prevents unintended exposure on external network interfaces.
• The implementation and unit test changes are clean, idiomatic, and pass all Go, Python, and Java Prism test suites.

---

💡 Tip: Comment /gemini review on this pull request to trigger a new Gemini code review.

[shunping]

LGTM, thanks!