fix: reject every document docker compose config rejects - #63

Merged

lesnik512 merged 30 commits into

mainfrom

docs/docker-rejection-parity

Jul 15, 2026

Commits on Jul 14, 2026

docs: rule that Docker's refusals bind, and audit the gate against it
lesnik512
committed
f55c47c
docs: correct the ${VAR} rationale and record the ratchet sequencing
lesnik512
committed
c792611
docs: land the conformance harness last, without an allow-list
lesnik512
committed
50d29d9
feat: add the value grammars Docker validates scalars against
lesnik512
committed
cf09a65
fix: match Docker's size/number/integer/port grammars exactly
lesnik512
committed
5480aff
fix: reject port numbers outside Docker's 0/1-65535 bounds
lesnik512
committed
e05b53e
fix: validate resource keys against Docker's own grammar
lesnik512
committed
beba677
fix: close the count/integral-value grammar gaps in resource keys
lesnik512
committed
f0f4735
fix: shape-check the ignored service keys
lesnik512
committed
45105bc
docs: make podman, not documentation, the test for what we may refuse
lesnik512
committed
0484f2c
fix: close the structural-key divergences from Docker
lesnik512
committed
1931f1d
fix: harden build/ports/networks against the differential re-audit
lesnik512
committed
5d6edaf
fix: read YAML floats the way Docker reads them (1.2 exponents)
lesnik512
committed
5647e4c
test: assert compose2pod refuses whatever docker compose refuses
lesnik512
committed
2066e43
test: surface conformance over-rejections instead of discarding them
lesnik512
committed
afd5b9a
test: narrow the env_file conformance carve-out to its host-dependent shapes
lesnik512
committed
0735814
docs: correct three claims the code refutes, and promote the parity rule
lesnik512
committed
eab2c0b

Navigation Menu

Uh oh!

Uh oh!

fix: reject every document docker compose config rejects - #63

fix: reject every document docker compose config rejects#63
lesnik512 merged 30 commits into
mainfrom
docs/docker-rejection-parity

Commits on Jul 14, 2026

docs: rule that Docker's refusals bind, and audit the gate against it

docs: correct the ${VAR} rationale and record the ratchet sequencing

docs: land the conformance harness last, without an allow-list

feat: add the value grammars Docker validates scalars against

fix: match Docker's size/number/integer/port grammars exactly

fix: reject port numbers outside Docker's 0/1-65535 bounds

fix: validate resource keys against Docker's own grammar

fix: close the count/integral-value grammar gaps in resource keys

fix: shape-check the ignored service keys

docs: make podman, not documentation, the test for what we may refuse

fix: close the structural-key divergences from Docker

fix: harden build/ports/networks against the differential re-audit

fix: read YAML floats the way Docker reads them (1.2 exponents)

test: assert compose2pod refuses whatever docker compose refuses

test: surface conformance over-rejections instead of discarding them

test: narrow the env_file conformance carve-out to its host-dependent shapes

docs: correct three claims the code refutes, and promote the parity rule

Commits on Jul 15, 2026

fix: grammar-check deploy.resources limits/reservations values

fix: close healthcheck scalar value grammars (interval/timeout/start_period/retries)

fix: validate build's known-key values, not just their names

fix: close four nested false-green classes (ssh, extra_hosts, stores, ports)

fix: close two false greens in ports long-form target/host_ip

fix: close networks entry and build.secrets false greens

fix: close build.secrets source-omitted raw-crash

fix: close networks/volumes definition and depends_on sub-key false greens

fix: require explicit condition on long-form depends_on entries

fix: implicit default network and named-volume reference parity

docs: scope the parity decision to what shipped, name the one residual

fix: classify named-volume sources by Docker's name grammar, not a prefix test

fix: reject whitespace-padded numeric/size scalars Docker refuses