Sovereign AI blueprint

Validate a pinned Docker teaching profile and export an offline runner with measurable isolation checks.

How this experiment works

The validator checks parsed Compose settings for no network, non-root execution, read-only storage, capability removal and resource budgets.

What it does not prove

The runner is a teaching pack, not a production AI platform. A sovereign system also needs host, network, identity, provisioning and operational controls.

Try this challenge

Change network_mode to host. Then add a writable mount. Which controls reject the configuration?

Enable JavaScript to run the experiment on your device.