Public release release-ffc6f14a3723

Source commit: ffc6f14a3723ea6aa513613a5406d737f21b201d

Public tree identity: sha256:a77575c31dda8de868bc8de91d94df55c46f0b028e755e56a8cce8e27f72a42b

docs/environments.md

@@ -0,0 +1,34 @@
+# Environments
+
+Declare environments in the bundle under:
+
+~~~text
+envs/<name>/Containerfile
+envs/<name>/Dockerfile
+~~~
+
+Reference one by logical name:
+
+~~~rust
+use clusterflux::env;
+
+let linux = env!("linux");
+~~~
+
+Bundle inspection reports every discovered environment and its digest:
+
+~~~bash
+clusterflux bundle inspect --project .
+~~~
+
+The bundle definition is authoritative for every spawn. The coordinator passes
+the declared environment identity and digest in the TaskSpec, and the node
+resolves that exact definition. A same-named local recipe with different bytes
+is rejected rather than substituted.
+
+On Linux, container-backed environments use rootless Podman. Clusterflux does
+not enable privileged containers by default.
+
+A task may use a bind-mounted local checkout for speed. That source path is
+non-hermetic. Choose a source snapshot when you need a reproducible input
+identity independent of the current working tree.