14 lines
770 B
JSON
14 lines
770 B
JSON
{
|
|
"source_path": "/home/archipelago/Projects/archy/docs/adr/009-manifest-container-security.md",
|
|
"type": "ADR",
|
|
"confidence": "high",
|
|
"manifest_override": false,
|
|
"title": "ADR-009: Manifest-Level Container Security Enforcement",
|
|
"summary": "Enforce mandatory container security defaults (readonly root, no-new-privileges, non-root UID, dropped capabilities, pinned tags) at the manifest level during container creation.",
|
|
"scope": ["container security", "app manifests", "manifest validation", "podman container creation", "security defaults", "capability restrictions", "seccomp", "core/container module"],
|
|
"cross_refs": ["docs/app-manifest-spec.md", "core/container/src/", "core/security/src/"],
|
|
"locked": true,
|
|
"precedence": null,
|
|
"notes": ""
|
|
}
|