Peel the image, read the control baked in

Before you start

An image is the unit a control claim is made about — "containers don't run as root," "no secrets in the image," "only the service port is exposed." You are handed two REAL OCI images: a clean stock alpine and a misconfigured twin built by a real `docker build`, and asked to read each claim straight off the image's manifest and config, find the secret baked into a layer, and click the exact field where the twin contradicts its claim. This surface is the image, rendered as nested selectable regions: the config (User, ExposedPorts, Env, Cmd) and the manifest's ordered layer descriptors, each with its real sha256 digest. Every value you reveal is the OCI reader's real decode of the real blob — the same field `docker inspect` shows, and the layer's secret is read straight from the real (decompressed) tar by the same pattern set a secret scanner uses. Nothing is invented; the image is the answer key. Start on the broken twin.