# Sellable Agent host container

This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.

Build from this directory after
`@sellable/install@0.1.702` is
published:

```sh
docker build --platform linux/amd64 \
  --build-arg INSTALLER_INTEGRITY='sha512-…' \
  --tag sellable-agent-host:0.1.609-wip.hermes-desktop.20260811160530 .
```

Create a private `bootstrap/` directory owned by root with mode `0700`. It must contain `bootstrap.json`, `provider-auth`, and `slack-app`, each owned by root with mode `0600`. `bootstrap.json` contains only non-secret identities, hashes, package integrities, and the control-plane URL. The other two files contain the provider JSON and global Slack app token whose hashes are pinned by `bootstrap.json`.

Set `SELLABLE_AGENT_IMAGE` to the exact built image digest and start `compose.yaml`. The container bootstraps idempotently, writes `bootstrap/registration-receipt.json`, and starts the worker and isolated runtime under s6. Do not mount a Docker socket.