# ============================================================
# Nucleus Sovereign Agent OS — Docker Compose (US SOC2)
# ============================================================
# Jurisdiction: United States — SOC2 Type II
# Data Residency: Recommended (US)
# Audit Retention: 1 year (365 days)
# HITL: 3 operation types (moderate)
# Kill Switch: Not required
#
# Usage:
#   docker compose -f docker-compose.us-soc2.yml up -d
#   docker compose -f docker-compose.us-soc2.yml run nucleus kyc demo
# ============================================================

services:
  nucleus:
    build:
      context: .
      args:
        JURISDICTION: us-soc2
    image: nucleus-agent-os:us-soc2
    container_name: nucleus-us-soc2
    volumes:
      - nucleus-brain:/app/.brain
    environment:
      - NUCLEUS_JURISDICTION=us-soc2
      - NUCLEAR_BRAIN_PATH=/app/.brain
      - NUCLEUS_RATE_LIMIT=200
      - NUCLEUS_RATE_WINDOW_SECONDS=60
    restart: unless-stopped
    read_only: true
    tmpfs:
      - /tmp:size=100M
    deploy:
      resources:
        limits:
          memory: 512M
          cpus: '1.0'
        reservations:
          memory: 128M
          cpus: '0.25'

volumes:
  nucleus-brain:
    driver: local
