# The agent sandbox base image (spec §15): the "Computer" an agent's
# environment tools run inside. Non-root by construction, no setuid
# binaries, designed to run with cap-drop ALL, a seccomp deny profile,
# read-only rootfs, and no network.
FROM debian:bookworm-slim

RUN useradd --uid 10001 --user-group --create-home --shell /usr/sbin/nologin agent \
    # No privilege-escalation paths: strip every setuid/setgid binary.
    && find / -xdev -perm /6000 -type f -delete

USER 10001:10001
WORKDIR /home/agent

# Idle keep-alive; the orchestrator execs work into the container.
CMD ["sleep", "infinity"]