# Lab 04 — Scan a model artefact for ML supply-chain risk.
# Runs on the shared lab-pack base image. The scanner is pure standard library
# (pickle, pickletools, hashlib), so the core lab needs nothing beyond the base.
FROM aais-labs:1.0.0

# Optional: install the real safetensors library so §4 uses it rather than the
# notebook's hand-rolled fallback. The lab runs either way.
RUN pip install --no-cache-dir safetensors==0.4.5 || true

# Run just this lab in isolation:
#   docker build -t aais-lab-04 .
#   docker run --rm -p 8888:8888 -v "$PWD":/work aais-lab-04 \
#     jupyter lab --ip=0.0.0.0 --allow-root --ServerApp.root_dir=/work
# then open the printed JupyterLab URL and run 04_model_artifact_scan.ipynb.
