docs(cv): publish qualified acceptance and import handoff

docs/cv-redesign/linux-run.py

@@ -268,7 +268,8 @@ def run(args):
         assert sql(f"SELECT COUNT(*) FROM INFORMATION_SCHEMA.SCHEMATA WHERE SCHEMA_NAME='{schema}'") == '0'
         sql(f'CREATE DATABASE `{schema}` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci')
         created = True
-        commands.run(['docker', 'network', 'create', '--internal', '--label', 'task=cv-ux-01', network])
+        # A regular owned bridge permits Docker's loopback-only published API port.
+        commands.run(['docker', 'network', 'create', '--label', 'task=cv-ux-01', network])
         network_created = True
         commands.run(['docker', 'network', 'connect', '--alias', 'mariadb', network, db])
         attached = True
@@ -287,6 +288,9 @@ def run(args):
         commands.run(create + [args.image])
         assert commands.run(['docker', 'inspect', '--format', '{{.Image}}', api]) == args.image
         commands.run(['docker', 'start', api])
+        bindings = json.loads(commands.run(['docker', 'inspect', '--format', '{{json .NetworkSettings.Ports}}', api]))
+        if bindings.get('8080/tcp') != [{'HostIp': '127.0.0.1', 'HostPort': '5302'}]:
+            raise ValueError('Owned API loopback port was not published.')
         deadline = time.monotonic() + 120
         while True:
             try: