Cyber Security Docker Deploy

Secure deployment of a Python + Next.js app with source code protection (client has root access) Description: I'm looking for a DevOps / Security Engineer experienced in deploying applications to untrusted environments. Context: I have a software product made of a Python backend and a Next.js frontend. It needs to be installed on a server managed by my client. The challenge is that the client has root access on their own machine, but must not be able to read, copy, or inspect my source code in any way. What I'm looking for: A Docker-based solution where only I have access to the source code, while the client can only run the application. Strategies to protect the code even in a scenario where the end user has root privileges on the host (e.g. private images, protected registry, layer separation, isolated runtime, possible remote execution / licensing, etc.). I am NOT interested in compilation/obfuscation approaches such as Cython, Nuitka, or similar. Requirements: Real-world experience with Docker in security/third-party distribution contexts. Solid knowledge of Python and Next.js at the deployment level. Ability to clearly explain the real limitations of the proposed solution. Expected deliverables: A working, documented Docker setup. A document describing the adopted security model and its limitations. Please include a short description of a similar case you've handled before.