Validate deployed image receipts and local identities before startup, ignore caller Compose and image overrides, and report success only after health checks.
Install versioned Bash entrypoints and their standalone controller under the deployment lock while preserving local customizations. Cover lifecycle and installation behavior in isolated tests.
eezd