By framing kernel exposure as an emergent property of container convenience, DockerGate challenges the assumption that container isolation is inherently secure. It reveals that without automated ...