Public release release-b8454b34d38c

Source commit: b8454b34d38cc2ba0bd278e842060db45d091e1c

Public tree identity: sha256:69d6c8143bf6227e1bb07852aa94e8af9c26793eca252bb46788894f728cb6d2

docs/environments.md

@@ -0,0 +1,34 @@
+# Environments
+
+Declare environments in the bundle under:
+
+~~~text
+envs/<name>/Containerfile
+envs/<name>/Dockerfile
+~~~
+
+Reference one by logical name:
+
+~~~rust
+use clusterflux::env;
+
+let linux = env!("linux");
+~~~
+
+Bundle inspection reports every discovered environment and its digest:
+
+~~~bash
+clusterflux bundle inspect --project .
+~~~
+
+The bundle definition is authoritative for every spawn. The coordinator passes
+the declared environment identity and digest in the TaskSpec, and the node
+resolves that exact definition. A same-named local recipe with different bytes
+is rejected rather than substituted.
+
+On Linux, container-backed environments use rootless Podman. Clusterflux does
+not enable privileged containers by default.
+
+A task may use a bind-mounted local checkout for speed. That source path is
+non-hermetic. Choose a source snapshot when you need a reproducible input
+identity independent of the current working tree.