The copy between registries (ADR 0096) reaches the mesh's registry over HTTP from inside the builder's container, where loopback on the default bridge is not the machine; docker push never noticed because it went through the machine's daemon. The builder already holds the runtime's socket, so the host network adds nothing it did not have.