# ============================================================================
# MillerBind v9 — CASF-2016 Benchmark Validation (Docker)
# BindStream Technologies
# ============================================================================
#
# For full independent validation with encrypted model weights:
#
#   docker run --rm bindstream/millerbind-v9-validation
#
# This Dockerfile is provided for transparency. The actual Docker image
# is pre-built and available from Docker Hub.
#
# SECURITY:
#   - Model weights are AES-256 encrypted at rest
#   - Python source compiled to .pyc bytecode (no readable code)
#   - Runs as non-root user with read-only filesystem
#   - No network access required — fully offline validation
#
# ============================================================================

FROM python:3.11-slim

LABEL maintainer="BindStream Technologies"
LABEL description="MillerBind v9 — CASF-2016 Benchmark Validation"
LABEL version="9.0.0"

WORKDIR /app

# NOTE: The full Docker image includes:
# - AES-256 encrypted ExtraTrees model weights (et_model.aes)
# - AES-256 encrypted XGBoost model weights (xgb_model.aes)
# - AES-256 encrypted CASF-2016 benchmark features (benchmark.aes)
# - Compiled validation bytecode (validate.pyc)
#
# None of these files contain readable model weights or source code.
# See README.md for instructions on running the pre-built image.