container,needs_recreate_for_migration,current_image_ref,current_image_id_12,repo_digest,local_available,registry_available,proposed_immutable_pin,compose_source,rollback_image,recreate_cmd_design,data_mount_network_invariants,recreate_ready,gating_phase incomex-nuxt,YES (to swap NUXT_DIRECTUS_SERVICE_TOKEN),${NUXT_SSR_IMAGE:-asia-southeast1-docker.pkg.dev/github-chatgpt-ggcloud/web-test/nuxt-ssr:latest},72715a92885c,asia-southeast1-docker.pkg.dev/github-chatgpt-ggcloud/web-test/nuxt-ssr@sha256:72715a92885c9b2a467cabccdb1e3b8e5221dbfdae68e59f9daef0af08bfab30,YES (docker cache only),NO (AR pull DENIED from VPS 2026-07-21: 'Artifact Registry API has not been used in project 812872501910 ... or it is disabled'),"set NUXT_SSR_IMAGE=<digest> in docker/.env AFTER docker save backup; do NOT rely on :latest",docker-compose.yml L162,same digest (from docker save tarball),"docker compose up -d --no-deps --force-recreate nuxt WITH NUXT_SSR_IMAGE pinned and pull_policy=missing (NO pull)","NUXT_DIRECTUS_URL=http://directus:8055; NUXT_AGENT_DATA_API_KEY; RP_PG gateway host=postgres; network incomex_default; no critical named volume",NO,NUXT-IMG-H1 (pin + docker save + prove recreate) incomex-agent-data,YES (to swap DIRECTUS_ADMIN_TOKEN in agent-data.env),agent-data-vps-prod:9acd60503290-20260717,9acd60503290,"agent-data-vps-prod@sha256:9acd6050..., agent-data-local@sha256:9acd6050...",YES,NO (local-only image; never pushed to a registry),"already pinned to immutable build-id tag; RECOMMEND docker save backup (local-only = single copy)",docker-compose.yml L130 (AGENT_DATA_IMAGE fallback REMOVED per Wave-A1),same tag/digest (docker save tarball),"docker compose up -d --no-deps --force-recreate agent-data",env_file /etc/incomex/agent-data.env; depends_on qdrant healthy; google creds mount /app/credentials/google-credentials.json; QDRANT_URL http://qdrant:6333; network,YES (with docker save backup first),none (proceed in S3) incomex-directus,NO (rotation is DB/API-side; token/password live in directus_users not container env),directus/directus:11.5,(ref only),directus/directus@sha256:23f2f526599b,YES,YES (public Docker Hub semver tag),"n/a for rotation; digest pin optional hardening",docker-compose.yml L65,directus/directus:11.5,"n/a — no recreate required for C2B1",PG data dir; DIRECTUS_KEY/SECRET; network,YES (not required),n/a