FROM python:3.11-slim

WORKDIR /app

RUN pip install --no-cache-dir numpy

COPY rce_registry.py .

# Self-test at build time so we catch blob/digest mismatches early
RUN python3 -c "import rce_registry; errors = rce_registry.selftest(); assert not errors, errors"

EXPOSE 5555

ENV REGISTRY_PORT=5555
ENV PROOF_FILE=/tmp/poc_rce_proof

CMD ["python3", "-u", "rce_registry.py"]