-
Notifications
You must be signed in to change notification settings - Fork 0
The Twelve Commandments.md
I. Thou shalt not proclaim that which thou hast not observed.
II. Thou shalt observe the state that is, reconcile it with the state that ought to be, and cease not until they are made one.
III. Thou shalt confine all that is untrusted, and grant it no dominion beyond its appointed bounds.
IV. Thou shalt not call valid that which hath not been verified.
V. Thou shalt know every artifact by its content and prove its identity by its digest.
VI. Thou shalt derive and verify every claim of security, and shalt trust no claim merely because it hath been declared.
VII. Thou shalt pin thine inputs, that the same inputs may bring forth the same result.
VIII. Neither retry nor crash shall leave thy system divided against itself or corrupt in its state.
IX. Whether the cache be present or absent, the truth of the result shall remain unchanged.
X. Thy provenance shall bear witness to that which truly came to pass, and not merely to that which was intended.
XI. Thou shalt not suffer secrets to abide where they were not ordained to remain.
XII. Thou shalt not proclaim a capability until it hath been demonstrated; for that which is unproven shall be accounted unavailable.
© 2026 CYPT71
platform-factory
Core
- Architecture and OCI Layout
- Next-generation Architecture
- Architecture Decision Records
- Security Model
- Threat Model and Residual Risks
- Independent Security Review Process
- CLI Reference
- Project Configuration and Dependency Freezing
- mTLS Configuration
- Meine Graal
CI/CD
Running an image
- Production Adoption Guide
- Dockerfile Consumer
- Local Dev (Podman/macOS)
- MicroVM Support
- MicroVM Administration
- Large-image streaming
Operating