Checks Dockerfiles for best practices like pinned images, non-root users, and health checks.
Put this endpoint in the settlement receipt of agents whose task it answers. You pay only when the recommendation converts on-chain.