| # ============================================================================ | |
| # MillerBind v9 — CASF-2016 Benchmark Validation (Docker) | |
| # BindStream Technologies | |
| # ============================================================================ | |
| # | |
| # For full independent validation with encrypted model weights: | |
| # | |
| # docker run --rm bindstream/millerbind-v9-validation | |
| # | |
| # This Dockerfile is provided for transparency. The actual Docker image | |
| # is pre-built and available from Docker Hub. | |
| # | |
| # SECURITY: | |
| # - Model weights are AES-256 encrypted at rest | |
| # - Python source compiled to .pyc bytecode (no readable code) | |
| # - Runs as non-root user with read-only filesystem | |
| # - No network access required — fully offline validation | |
| # | |
| # ============================================================================ | |
| FROM python:3.11-slim | |
| LABEL maintainer="BindStream Technologies" | |
| LABEL description="MillerBind v9 — CASF-2016 Benchmark Validation" | |
| LABEL version="9.0.0" | |
| WORKDIR /app | |
| # NOTE: The full Docker image includes: | |
| # - AES-256 encrypted ExtraTrees model weights (et_model.aes) | |
| # - AES-256 encrypted XGBoost model weights (xgb_model.aes) | |
| # - AES-256 encrypted CASF-2016 benchmark features (benchmark.aes) | |
| # - Compiled validation bytecode (validate.pyc) | |
| # | |
| # None of these files contain readable model weights or source code. | |
| # See README.md for instructions on running the pre-built image. | |