config

Applies interventions to base in order. In a container each one is also applied alone and checked against the unchanged control: its attributes must be mirrored and the image, command, run flags or Dockerfile steps must differ, so an intervention that does not reach the container is refused with the manifest's reason instead of being counted as a change.