Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Studies LH021

What can public PHP consumer image repositories show of a rebuild?

The answer so far. The public records can show selected projects' PHP base-image instructions and that workflows ran at the sampled commit. In this precommitted three-repository sample, the deterministic four-file cap found three literal FROM php: lines for WordPress and four for Drupal; for Nextcloud it selected four unrelated proxy example Dockerfiles. Each repository's ten most recent run records included two successful runs at its sampled head SHA. None of those observations says which base digest a job resolved, whether it pulled layers, whether an image was published or deployed, or whether the patch prompted a change. The Nextcloud result is a coverage failure of this file-selection rule, not evidence that Nextcloud does not use PHP.

Write-up studies/LH021/LH021.md

From studies/LH021/ in the repository, last changed 9 November 2026.