{
  "source_path": "/home/archipelago/Projects/archy/docs/adr/009-manifest-container-security.md",
  "type": "ADR",
  "confidence": "high",
  "manifest_override": false,
  "title": "ADR-009: Manifest-Level Container Security Enforcement",
  "summary": "Enforce mandatory container security defaults (readonly root, no-new-privileges, non-root UID, dropped capabilities, pinned tags) at the manifest level during container creation.",
  "scope": ["container security", "app manifests", "manifest validation", "podman container creation", "security defaults", "capability restrictions", "seccomp", "core/container module"],
  "cross_refs": ["docs/app-manifest-spec.md", "core/container/src/", "core/security/src/"],
  "locked": true,
  "precedence": null,
  "notes": ""
}