catalog / devtools

Container Runtime

Build, run and isolate application images reproducibly.

16 capabilities 1 sections reference specification

Build against it

# give your agent the catalog — no account, no install
claude mcp add provespec -- npx -y provespec-mcp

# then, from any agent session
spec_get(slug: "container-runtime")                → the capability tree
spec_checklist(slug: "container-runtime")          → the questions to answer
spec_grade(slug: "container-runtime", grades: [...])  → parity % + the gap list

# or just fetch it
curl https://provespec.com/catalog/container-runtime/spec.json

Grade every capability below as yes · partial · no · na, with a file reference as evidence. Whatever you leave ungraded counts as missing — the gap list is the work queue.

Or just paste this to your agent

Use the ProveSpec MCP server. Fetch the "container-runtime" spec with
spec_get, then walk spec_checklist and grade this repository against it —
one verdict per capability, each with a file reference as the note.
Call spec_grade with the results and give me the gap list as the plan.

If the server is not registered, add it first:
  claude mcp add provespec -- npx -y provespec-mcp

The specification

AI 16

Images

✓ Build from a declarative file with cached layers
✓ Layers are content-addressed and shared between images
✓ Multi-stage builds so build tools stay out of the result
✓ Multi-architecture images amd64, arm64

Registry

✓ Push, pull and tag against a registry with auth
✓ Image digests pin exactly, tags do not the reproducibility distinction

Runtime

✓ Namespaced processes, filesystem and network
✓ CPU and memory limits enforced
✓ Read-only root filesystem and dropped capabilities available
✓ Run as a non-root user

Storage

✓ Volumes and bind mounts with explicit lifetimes

Networking

✓ Port publishing and container-to-container networks

Lifecycle

✓ Start, stop, restart policy, health check
✓ Signals forwarded to PID 1 for graceful shutdown the zombie-process trap

Observability

✓ Logs, stats and exec into a running container

Supply chain

✓ Image scanning and signature verification

Download spec.json All 100 specs