Do: start with an empty course folder and no COPY instruction so local files and secrets cannot enter the image. Example: build a reviewed base image from its approved definition, then add one synthetic input deliberately. Check: list the context before building and confirm it contains only reviewed files; stop when an unexpected file appears.