Limitations
Hostwright is in active development and not production ready. This page states the current support boundary.
Implemented
Section titled “Implemented”- Manifest v2 with a restricted, fail-closed parser, deterministic legacy migration preview, validation, planning, and capability reporting.
- Apple
containerobservation and confirmation-gated create, start, restart, and delete paths through the runtime adapter. - SQLite state with desired, observed, event, operation, ownership, health, restart, and recovery records, Hostwright UUIDs, provider binding, and fencing.
- Bounded logs, local events, recovery, and diagnostics; safe doctor checks; local policy and team profiles; secret references with a read-only Keychain reader; a one-shot Control API; and a reviewed-local extension handshake.
- A foreground reconciliation loop, advisory scheduler and resource models, narrow stack-file import, and local benchmark evidence.
Outside the current surface
Section titled “Outside the current surface”The following are outside the current command surface. Each states present behavior.
| Area | Current behavior |
|---|---|
| Install | Source build only. No packaged, signed, or notarized distribution, and no upgrade, rollback, or uninstall command. |
| Runtime providers | Narrow Apple container surface. The Containerization framework path is absent. |
| Lifecycle | One confirmed action per apply. Stop, restart, down, and rm are absent, and rollback is manual. |
| Images | Local reference policy only. Hostwright uses a pre-pulled local image and performs no registry resolution, signing, or scanning. |
| Storage | Guarded mounts only. Volumes, snapshots, quotas, and online backup or restore are absent. |
| Networking | Loopback publishing only. Networks, DNS, ingress, TLS, and tunnels are absent. |
| Daemon | Foreground loop only. Autonomous background operation, a launch agent, and unattended mutation are absent. |
| Control and plugins | One-shot API and a declaration handshake. A persistent API, RBAC, audit, and plugin execution are absent. |
| Scheduling | Advisory models only. Placement, capacity reservation, and accelerator exposure are absent. |
| Multi-host | Single host only. Clustering, consensus, and remote operations are absent. |
| Kubernetes and Docker | No CRI, kubelet, pod sandbox, Docker API, or Compose runtime. Stack import is a narrow conversion. |
Non-goals
Section titled “Non-goals”Some capabilities are held as permanent boundaries by design. See Non-goals.