Post

There's a difference between permission systems and architectural guarantees. That distinction is what separates a contained failure from a production incident. This piece by mgks on what closing that gap requires, and what Docker committing the spec to the CNCF means: https://bit.ly/4jxV3xU