This seems like it takes something simple and makes it much more complicated with the aim of making it simple and then fails on all counts. For example, how is this different/better than simply using version controlled docker-compose files instead of flat single image dockerfiles?<p>This is adding yet another abstraction layer on top of docker which is already a convoluted space with numerous options available. Additionally, the "Balanced control between App Devs and Operators" tagline makes me wonder how "operators" would have a better awareness of how a deployment should operate versus the developers themselves. The developers should be creating their solutions based on previously defined security constraints and compliance requirements, so what "balanced control" is being shifted around here?