# Lab 19 — AI risk register, mapped to NIST / ISO / EU AI Act (Chapter 19).
#
# A pure-Python GRC-as-code lab: no model, no API, no GPU. It runs entirely on the
# shared base image. Most users should use the pack-level `docker compose up`
# (labs/docker-compose.yml); this Dockerfile is for running the single notebook
# standalone.
#
# Build the shared base once from the labs/ root:
#   docker build -t aais-labs:1.0.0 ./labs
# Then build + run just this lab (JupyterLab on :8888, token "aais"):
#   docker build -t aais-lab19 ./labs/19-grc-for-ai
#   docker run --rm -p 8888:8888 -v "$PWD/labs":/work aais-lab19
# Open the printed http://127.0.0.1:8888/lab?token=aais URL and run
# 19_ai_risk_register.ipynb (build it first with labs/build_notebooks.sh).
FROM aais-labs:1.0.0

WORKDIR /work
EXPOSE 8888

CMD ["jupyter", "lab", "--ip=0.0.0.0", "--port=8888", "--no-browser", \
     "--allow-root", "--ServerApp.root_dir=/work", \
     "--IdentityProvider.token=aais"]
