dockerlisted

# docker Container operations. ## Operations - `docker.build(dockerfile, tag, context?)` - `docker.run(image, args?, mounts?, env?, network?)` — foreground or detached. - `docker.ps()`, `docker.logs(id)`, `docker.stop(id)`, `docker.rm(id)`. - `docker.inspect(id)`. - `compose.up(file)`, `compose.down(file)`. - `docker.sandbox(image, cmd)` — isolated run used by `acquisition/SANDBOX.md`. ## I/O Contract ```yaml io_contract: input: { op, args: map } output: { result } idempotent: depends side_effects: [shell, fs, network, state_mutation] ``` ## Safety - `--privileged` requires high risk Council. - Mounting sensitive paths (`/`, `$HOME`, secrets) veto at Safety member if observed in acquired skills. - Sandboxing default profile: no-network, read-only fs except workdir.