Isolated environments that evolve with your code, verify themselves end-to-end from the host, and stay out of your way.
Extracted installing-incus.md and installing-docker.md as single sources of truth. No more scattered prerequisite instructions — one file per tool, covering every supported platform.
Install instructions for Ubuntu, WSL2, and macOS. Each platform gets its own section with tested commands and expected output.
Documents the networking conflict between Docker and Incus and provides the fix. Verification steps confirm both tools work side-by-side.
Common failure modes with symptoms, causes, and fixes in a scannable table format. Agent instructions included for one-command-at-a-time output.
Streamlined SKILL.md and the awareness context. Removed duplication, added missing references, and made agents self-sufficient for verification.
Added mock-authoring.md reference for mock service discovery. Added Agents section pointing to dtu-profile-builder and dtu-browser-tester. Removed Key Concepts section that duplicated api-reference.md and profiles.md.
Added agent instruction comments so verification commands run automatically instead of asking the user to do it manually. Agents now verify Incus installs directly.
Reduced dtu-awareness.md to remove content that was already covered by the skill and referenced docs. Less redundancy, fewer tokens consumed.
Added base.config to the profile schema, enabling Incus container configuration flags like security.nesting at creation time. Docker can now run nested inside an Incus container.
Profiles can now pass arbitrary Incus container configuration at creation time. This unlocks any workload that needs container nesting, device passthrough, or custom kernel parameters.
docker-in-incus.yaml — a minimal profile that exercises Docker nested inside Incus with full networking verification. Host-to-Docker inbound, Docker-to-host outbound, Docker-to-Docker inter-container.
docker-in-incus.md covers setup, platform-specific issues (WSL2, bare-metal Ubuntu, AppArmor), networking paths, and known non-working workarounds. E2E tests cover all networking paths. Test cleanup fixed to only destroy session containers.
The new update command patches a running environment without destroying it. One command transforms the rebuild cycle into a fast refresh.
Destroy environment
Re-provision from scratch
Reinstall all dependencies
Re-run readiness checks
Full teardown for every iteration
Environment stays alive across iterations
New update section with cmds (shell commands) and refresh_pypi (bool to rebuild PyPI overrides from current source repos).
Validates running env, optionally kills pypiserver, clears wheels, rebuilds overrides, runs update commands, then re-checks readiness.
Verify: new code is picked up, environment stays running across updates, and the skip-readiness path works correctly.
Rebuilds PyPI overrides from current source repos, clears pip cache, reinstalls from local packages.
Kills the running server, reinstalls the package, and restarts — a clean server refresh without touching the container.
check-readiness now verifies that access ports are reachable from the host — not just from inside the container. Confirms Incus proxy devices work end-to-end.
Connects via Python socket and urllib from the host process. Verifies both TCP reachability and HTTP response codes for each mapped port.
New PortMapping fields: verify (default true), verify_timeout (30s), verify_interval (2s). Retry loop catches slow-starting services.
Unit tests with a real local HTTP server. E2E tests launch containers, verify access passes, stop the service, verify access correctly fails.
Standardized where DTU profiles live:
amplifier-bundle-gitea added as an includes dependency in the DTU behavior. Automatically available when the DTU bundle is composed.
DTU work now routes through agents, not the root session. The heavy skill loads in agent sessions so tokens are consumed only when DTU work is actually happening.
Skill loaded in root session. Token cost paid even when DTU not in use.
Lightweight awareness doc in root. Agents load skill as their first step with context_depth=all, context_scope=full.
Loads skill first, then builds and validates profiles. Reports state changes and issues encountered back to root.
Loads skill first, then runs browser-based tests against running environments. Full context handoff on delegation.
The DTU skill and agents are available in any Amplifier workspace
with the digital-twin-universe bundle composed.