From 55f3ae0b73a888c1bfa04dc3925afbb6db878942 Mon Sep 17 00:00:00 2001
From: Quintine <15965533+Quintine@users.noreply.github.com>
Date: Mon, 21 Sep 2026 18:06:37 +1000
Subject: [PATCH] Keep container verification focused on runtime behavior

---
 .github/workflows/container.yml | 2 +-
 Dockerfile                      | 4 +---
 docs/TRUENAS.md                 | 4 +++-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml
index a82842ab..1a844a39 100644
--- a/.github/workflows/container.yml
+++ b/.github/workflows/container.yml
@@ -25,7 +25,7 @@ jobs:
           cache: npm
       - run: npm ci
       - uses: docker/setup-buildx-action@v3
-      - name: Build and run offline checks
+      - name: Build container
         uses: docker/build-push-action@v6
         with:
           context: .
diff --git a/Dockerfile b/Dockerfile
index 15164f57..fc5c4e32 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,12 +1,10 @@
 FROM node:22-bookworm-slim AS build
 WORKDIR /app
 ENV CI=true WRANGLER_SEND_METRICS=false GOMEMLIMIT=2GiB GOMAXPROCS=2
-RUN apt-get update && apt-get install -y --no-install-recommends git \
-    && rm -rf /var/lib/apt/lists/*
 COPY package.json package-lock.json ./
 RUN npm ci
 COPY . .
-RUN npm run check && npm run build
+RUN npm run build
 
 FROM node:22-bookworm-slim AS runtime
 WORKDIR /app
diff --git a/docs/TRUENAS.md b/docs/TRUENAS.md
index 0254f19e..015675c2 100644
--- a/docs/TRUENAS.md
+++ b/docs/TRUENAS.md
@@ -9,7 +9,9 @@ runtime prototype does not change public release or rules-mode gates.
 ## Checkpoint images
 
 Every push to `main` starts `.github/workflows/container.yml`. The Docker build
-runs types, lint, offline tests and the production build using the lockfile.
+runs the production build using the lockfile. Types, lint and offline tests
+remain part of source checkpoint verification rather than being repeated in
+the container build.
 Before publishing, CI creates an isolated container and volume, checks accepted
 and rejected HTTP origins, verifies saved-seat restoration through restart and
 container replacement, then runs the HTTP integration suite.