Treat an approved legacy Compose rollout as a transaction
When an explicitly approved legacy Docker Compose deployment must temporarily remain outside the canonical supervisor, make the image-only change transactional. Verify and cache the exact scanned image digest first. Keep registry credentials in a short-lived Docker configuration …