Docker and CNCF partner on an open spec for agent permissions | Hacker News Reader