# ADR-001: Disable per-tenant Docker container orchestration

**Status:** Accepted (Phase 0 production readiness)  
**Date:** 2026-08-12

## Decision

Per-tenant Docker Compose / Docker-socket management is **out of production scope**. The previous `containerService` and admin Containers UI must not run in GA.

## Context

- The admin UI called `/admin/containers*` while matching API routes / `CompanyContainer` model were incomplete.
- `containerService` built Compose YAML via string interpolation and expected Docker socket access — a near-host RCE trust boundary inside the business data plane.
- Production readiness requires removing privileged incomplete features before scaling.

## Consequences

- `apps/api/src/services/containerService.ts` fails closed (`501 container_feature_disabled`).
- Admin containers page shows an explicit out-of-scope notice.
- Any future isolation requirement needs a separate controller with signed templates, quotas, audit, and no tenant-facing Docker socket.