- Own Docker build contexts and runtime container definitions.
- Keep framework runtime, agent execution runtime, exposed ports, mounted paths, and image build assumptions explicit.
base/owns the base image context.run/owns the runnable image context and compose file.- Root
DockerfileLocalis owned by the root contract but must stay compatible with this directory.
- Preserve the two-runtime model documented in the root contract: framework runtime under
/opt/venv-a0and agent execution runtime under/opt/venv. - Do not bake secrets, local
.envvalues, or user data into images. - Keep compose mounts aligned with
usr/,logs/, and other runtime-state expectations. - Image changes that affect GitHub publishing must stay synchronized with
.github/workflows/docker-publish.yml.
- Keep Dockerfile steps cache-friendly and explicit about which runtime they target.
- Avoid broad copies of ignored runtime folders.
- Update setup docs when ports, volumes, startup commands, or runtime layout change.
- Build the affected Docker context when Docker behavior changes.
- Run Docker-related tests or startup smoke checks when changing runtime entrypoints.
Direct child DOX files:
| Child | Scope |
|---|---|
| base/AGENTS.md | Base image Dockerfile, copied filesystem, and installation scripts. |
| run/AGENTS.md | Runnable image Dockerfile, compose example, entrypoints, and install scripts. |