FROM python:3.11-slim
WORKDIR /work
# sentence-transformers pulls the ~90 MB model weights from the Hub at run time,
# so this package verifies in script mode (which has network); a hermetic docker
# run would bake the weights into the image first.
RUN pip install --no-cache-dir sentence-transformers
CMD ["bash", "verify/verify.sh"]