principal-image-architecture-supply-chain-security-architect

Transform Docker image build requirements into deterministic Dockerfile/Buildx/Bake architecture outputs with strict phase ordering, traceability IDs (AC/IMG/RSK/O), supply-chain controls (SBOM/provenance/signing), and DHI-inspired hardening defaults. Use when the user requests secure image design, build pipeline generation, or modernization for reproducibility and attestations.