What problem does it solve? Container apps on the davidlaporte.org Innovation Platform must pass strict CI gates — non-root user, port 8080 exposure, CVE-clean image, and a working /healthz endpoint — before deploy is allowed. This Skill encodes that exact contract so your Dockerfile passes the gates on the first push instead of failing CI repeatedly. ## Core Features & Use Cases - Gate-compliant Dockerfile authoring: Encodes the platform's exact rules for non-root USER validation (numeric uid or /etc/passwd name resolution), EXPOSE 8080, base-image patching, and the /healthz smoke test. - Stack-specific recipes: Provides tested reference Dockerfiles for Python, Node, and multi-stage Go builds, with digest-pinned base images fetched live from the get_app_contract MCP tool. - Local pre-push verification: Ships a copy-paste bash block that replicates the CI gate's non-root decision logic, port check, and /healthz smoke test against a locally built image. - Use Case: You are adding a Dockerfile to a new inno-{app} container repo. The Skill guides you to the pinned base image, the correct USER directive, and a local check that mirrors CI, so the container gate passes on the first tag run. ## Quick Start Ask the AI to write or review the Dockerfile for your inno-{app} container app so it passes the platform's container CI gates.