feat(onboard): add dormant Docker bootstrap primitives

[ericksoa]

Summary

Adds the first narrowed PR3.10B review unit: dormant Docker bootstrap transaction-journal and canonical launch-spec primitives. The preserved monolithic #8037 source remains in append-only history, while this exact head tree contains only the six-path primitive slice on current main.

No adapter, shared-state transaction, provider registration, production import, or runtime activation is included. Existing Docker behavior and all user-visible support claims remain unchanged.

Related Issue

Part of #7744

Changes

• Define a private monotonic Docker cutover journal with bounded validation and legal transition rules.
• Define detached, deeply frozen canonical Docker launch-spec normalization and validation so the retained object cannot diverge from its canonical JSON or hash.
• Add focused adversarial tests for journal/spec validation, nested mutation rejection, and input-alias isolation.
• Extend the managed-bootstrap source inventory and internal dormancy documentation.
• Preserve the former 20-file source head at backup/podman-stack/pr8037-source-ad5397af.
• Preserve this exact head at backup/podman-stack/pr8037b1-final-a352b710b and the next split base at hold/podman-stack/pr8037b2-base-a352b710b.

Type of Change

• Code change (feature, bug fix, or refactor)
• Code change with doc updates
• Doc only (prose changes, no code sample modifications)
• Doc only (includes code sample changes)

Quality Gates

• Tests added or updated for changed behavior
• Existing tests cover changed behavior — justification:
• Tests not applicable — justification:
• Docs updated for user-facing behavior changes
• Docs not applicable — justification:
• Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
• Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification: Exact-tree review covers journal monotonicity, canonical detached/frozen launch state, bounded validation, and production dormancy.
• Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue:

Documentation Writer Review

• Documentation writer reviewed the completed changes
• Result: docs-updated
• Evidence: Exact head a352b710bd3fe57d5d28eb849d02c5d75b5a4d32 has the same tree as clean current-main reconstruction 149b3a244fe6707619010cddbad2976e880d89b2. The internal managed-bootstrap README accurately describes the dormant primitives; the exact-head follow-up only hardens the canonical object/hash boundary and adds its regression test. Source-shape coverage proves no production import or registration, so no user-facing documentation surface changes.
• Agent: Codex Desktop

DGX Station Hardware Evidence

• Tested on DGX Station
• Tested commit:
• Station profile/scenario:
• Result:
• Supporting evidence:

Verification

• Exact base/head: d09b530ef1d3045b0c26b6d34462cb2175d9fb94 / a352b710bd3fe57d5d28eb849d02c5d75b5a4d32.
• Review budget: six paths, +1,062/-0.
• Stable patch ID: 6aaa2ba4fec89d0e205d59b4a983929dfa499b95.
• Binary diff SHA-256: 18eedcc9bb68800c18e4100ef1edd8f224bb7f6a975c7b1803682239e691ccc1.
• Clean current-main reconstruction: 149b3a244fe6707619010cddbad2976e880d89b2; final-tree equality is exact at tree 439e941967a030b2ee54e8c0a0c9dd6a0e6d7823.
• Append-only ancestry: prior live head 345efce48244230c3293bfe5c47e7e469155f742 and current main are both ancestors of the signed+DCO graft; no remote history was rewritten.
• Exact-tree focused journal/spec tests: 13/13 passed; runtime-provider source-shape tests: 8/8 passed.
• Biome, diff-check, test-size, repository checks, typecheck, typecheck:cli, normal commit hooks, and pre-push typechecks passed.
• Production source inventory proves no adapter, provider registration, selectable runtime, or activation imports these primitives.

Risk Plan

• Primary risk: accepting an invalid journal transition or allowing retained launch state to diverge from its canonical hash before the later adapter owns destructive cutover.
• Containment: bounded parsers, detached canonical serialization, recursive freezing, explicit legal transitions, adversarial tests, and source-shape dormancy enforcement.
• Regression risk: none to the active Docker path; the primitives have no production consumer.
• Rollback: revert this inert six-path slice without changing runtime behavior.

Stack

• Merged base: PR3.10A feat(onboard): define dormant transactional managed bootstrap #8036, followed by current main d09b530ef1d3045b0c26b6d34462cb2175d9fb94.
• This slice: PR3.10B1 feat(onboard): add dormant Docker bootstrap primitives #8037, a352b710bd3fe57d5d28eb849d02c5d75b5a4d32.
• Next: PR3.10B2 feat(onboard): add transactional Docker bootstrap adapter #8128, extracting the transactional adapter/shared-state cutover and exact createReceipt cleanup binding; it will be append-restacked onto this exact held base.
• PR3.11 feat(onboard): bind managed create to runtime providers #8040 remains held until both PR3.10B slices establish the new handoff.
• Buildless and Podman support remain disabled until the complete all-agent, multiarch, GPU/local-inference, recovery, installer, and protected-E2E gates in [Epic] Support native Podman with buildless managed onboarding #7744 pass.

Signed-off-by: Aaron Erickson aerickson@nvidia.com

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.