# Dockerfile — Python runner for the Day-3 Risk-Tiering lab
# Base image pinned by index-digest (ADR-6).
# Re-resolve: docker buildx imagetools inspect python:3.12-slim --format '{{.Manifest.Digest}}'
FROM python:3.12-slim@sha256:423ed6ab25b1921a477529254bfeeabf5855151dc2c3141699a1bfc852199fbf

WORKDIR /workspace

# This is a PURE-PYTHON, DATA-ONLY lab: no model, no torch, no spaCy, no network.
# Only `rich` for pretty terminal output.
COPY app/requirements.txt ./requirements.txt
RUN pip install --no-cache-dir -r requirements.txt

# Bake app + data + prompts + worksheets so the image works standalone
# (compose mounts override at runtime; worksheets is mounted read-write for output).
COPY app/ ./app/
COPY data/ ./data/
COPY prompts/ ./prompts/
COPY worksheets/ ./worksheets/

CMD ["python", "app/risk_tiering.py"]
