Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Studies LH019

What do the official PHP moving image tags name over time?

The answer so far. At the first reading, each of four preselected moving tags in the official PHP Docker Hub repository named the same linux/amd64 manifest digest as its LH018 version-specific, same-variant counterpart. Each manifest and configuration blob was retrieved, its content verified against its SHA-256 digest, and the configuration declared the corresponding fixed PHP source version. The moving tags were first observed after their current manifests had been pushed. This baseline cannot say whether they briefly named older images after the fix release, when a pointer changed, whether the built executable is patched, or whether anyone pulled or ran an image.

Latest read, 28 October 2026 (unreviewed working note). Read the note

Write-up studies/LH019/LH019.md

Checkpoints

The working notes written at each read, newest first. They are unreviewed: a finding reaches a piece only after review.

From studies/LH019/ in the repository, last changed 9 November 2026.