Container Security
-
Portable Authority: How OCI Kits Turn Agent Permissions Into a Supply-Chain Artifact
Docker's Sandbox Kit Spec packages an agent, its tools, and its requested permissions into one signable OCI image, turning 'what may this agent do' from a runtime reconstruction into a diffable artifact.