A versioned Linux/AMD64 container runtime for sandboxed tool-use tasks. It bundles the public system, Python, Node, browser, office-document, and MCP dependencies needed by the task harness.
The image intentionally contains no task dataset, prompts, evaluation tests, credentials, or private source code. Those remain outside the image and are supplied to an isolated sandbox at runtime.
Use the immutable digest published by this repository:
ghcr.io/goodfire-ai/toolathlon-runtime@sha256:<digest>
The latest and commit tags are discovery aids. Evaluations should always pin the digest.
docker build --platform linux/amd64 -t toolathlon-runtime .Publishing is restricted to the repository workflow. It authenticates to GHCR with the repository-scoped GITHUB_TOKEN; no personal token or registry credential is stored in the repository or image.
This repository owns only the generic runtime. Task packages own their data, prompts, tool configuration, grading, and sandbox lifecycle.