Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Studies LH025

Five derived PHP image tags already declared fixed versions

The answer so far. At the first observation, all five preselected Docker Hub library application image tags exposed a linux/amd64 manifest and config declaring one of the fixed PHP source versions. They are current derived publisher artifacts, not evidence of when their moving tags first changed, whether their executable bytes were independently checked or whether any customer deployed them. All five tracks are left-censored with respect to the patch event, and the known Drupal track is a deliberate overlap with LH023.

Latest read, 28 October 2026 (unreviewed working note). Read the note

Write-up studies/LH025/LH025.md

Checkpoints

The working notes written at each read, newest first. They are unreviewed: a finding reaches a piece only after review.

From studies/LH025/ in the repository, last changed 9 November 2026.