The remote-Docker [ComputeBackend].
Delegated: boatramp targets an existing Docker daemon via the Engine API
([bollard]) — it does not install or manage Docker. materialize pulls the
image, launch creates + starts a container (entrypoint, env, cpu/mem limits,
restart policy) and discovers its IP:port, stop stops + removes it, and
health inspects its running state. The daemon endpoint + TLS/SSH creds come
from the environment (DOCKER_HOST, DOCKER_TLS_VERIFY, DOCKER_CERT_PATH),
never from the spec — per the secrets rule.
Cross-platform (it's an API client). The actual daemon round-trip is the live/integration seam (a self-skipping test against a local dockerd, like the S3/MinIO pattern); the orchestration here is what's compiled + linted.