# Known-unbounded docker CLI invocations, by file. RATCHET FILE.
#
# Regenerate with: bash scripts/tests/docker-bounds-scan.sh --regen
#
# test-docker-call-bounds.sh FAILS when a file not listed here gains an
# unbounded docker call. Entries are debt: bound the calls, then re-run
# --regen so the line disappears. The list may only shrink.
#
# It is NOT an approval. Every line is a place where a wedged dockerd can
# park the caller indefinitely — see the header of docker-bounds-scan.sh
# for what that cost in production.
#
# format: <count><TAB><path>
7	scripts/apply-coraza-waf-mode.sh
8	scripts/boot-orchestrator.sh
61	scripts/container-manager.sh
7	scripts/customer-container-watchdog.sh
1	scripts/detect-site-framework.php
3	scripts/ensure-docker-port-bindings.sh
9	scripts/ensure-edge-container.sh
14	scripts/haproxy-watchdog.sh
4	scripts/lib-container-tiers.sh
1	scripts/lib-edge-container.sh
1	scripts/lib-ols-validate.sh
2	scripts/powerdns-password-manager.sh
1	scripts/process-log-review.php
1	scripts/pull-container-images.sh
2	scripts/refresh-wp-versions.sh
12	scripts/regenerate-canonical-schema.sh
7	scripts/regenerate-coraza-overrides.sh
2	scripts/setup-coraza-logrotate.sh
2	scripts/setup-haproxy-syslog.sh
5	scripts/setup-powerdns-enhanced.sh
13	scripts/setup-shared-ols.sh
1	scripts/test-db-name.php
1	scripts/test-edge-container-parity.sh
2	scripts/test-ensure-edge-container.sh
2	scripts/test-postgresql-integration.sh
2	scripts/test-shared-vhost-security.php
6	scripts/test-valkey-integration.sh
2	scripts/test-valkey-isolation.sh
2	scripts/test-valkey-load-probe.sh
5	scripts/test-valkey-snapshot.sh
1	scripts/test-wp-campaign-followup.php
6	scripts/test-wp-inventory-scan.php
2	scripts/test-wp-patch-campaign.php
5	scripts/update-add-postgresql.sh
2	scripts/updates/2026.03.3/setup-haproxy-watchdog.sh
2	scripts/updates/2026.04.32/fix-postgresql-db-permissions.sh
2	scripts/updates/2026.05.102/fix-stock-ssl-conf.sh
5	scripts/updates/2026.05.107/migrate-container-tiers.sh
1	scripts/updates/2026.05.110/seed-customer-state-file.sh
3	scripts/updates/2026.05.121/cleanup-legacy-whp-suspended.sh
4	scripts/updates/2026.05.201/setup-cpanel-importer-sandbox.sh
1	scripts/updates/2026.05.84/ssl-renewal-state-backfill.sh
1	scripts/updates/2026.06.139/enable-http3-quic.sh
3	scripts/updates/2026.06.20/migrate-valkey-host-dir.sh
2	scripts/updates/2026.06.51/set-customer-restart-policy.sh
14	scripts/updates/2026.08.20/apply-dotfile-http-deny.sh
10	scripts/updates/2026.08.32/apply-backup-archive-http-deny.sh
1	scripts/updates/2026.08.32/apply-docker-log-limits.sh
8	scripts/updates/2026.08.33/install-shared-httpd-default-vhost.sh
1	scripts/verify-powerdns.sh
4	scripts/whp-docker-log-rotate.sh
3	scripts/whp-log-monitor-ai.py
9	scripts/whp-monitor-poll.py
4	scripts/wp-campaign-followup.php
21	setup.sh
2	web-files/ajax-status.php
3	web-files/api/external/system.php
9	web-files/api/health.php
6	web-files/api/sites.php
2	web-files/api/terminal.php
1	web-files/libs/container_stats.php
2	web-files/libs/CpanelImportSanitizationContainer.php
2	web-files/libs/disk_cleanup_helpers.php
2	web-files/libs/haproxy_manager.php
4	web-files/libs/shared_ols_manager.php
1	web-files/libs/site_disable.php
6	web-files/libs/ssl_manager.php
16	web-files/libs/WordPressManager.php
5	web-files/libs/WpInventoryScanner.php
5	web-files/pages/ai-monitor.php
17	web-files/pages/server-settings.php
2	web-files/scripts/ensure-shared-ols-vhosts.php
