Deterministic OCI / Docker 'docker save' tarball manifest & layer-chain graph analyzer + OverlayFS whiteout ('.wh.<name>' / '.wh..wh..opq') zombie-file & high-entropy secret unmasker engine (.tar, .tgz, .oci) built for Docker Hub, GitHub Container Registry, Kubernetes, AWS ECR — zero-upload ephemeral Wasm RAM execution.
Running ephemeral Wasm verification…