Container mode management engine in a security management system

One or more computer-storage media having computer-executable instructions embodied thereon that, when executed by a computing system having a processor and memory, cause the processor to perform operations, the operations comprising:

• accessing a container instance, wherein the container instance a container identifier;
• based on the container identifier of the container instance, selecting a secure compute mode transition control for the container instance;
• accessing the container instance, wherein the container instance is initialized in a container operating environment, the container instance is associated with a container security agent having a secure compute mode transition control for the container instance, wherein the container security agent supports restricting the container instance from executing restricted container operations during runtime;
• based on the secure compute mode transition control, transitioning the container instance into a secure state, wherein the secure state is associated with a secure state configuration.

A computer-implemented method, the method comprising:

• accessing a plurality of container instances associated with a plurality of container operations for each of the plurality of container instances;
• identifying a common pre-operation sequence associated with a subset of the plurality of container instances, wherein the subset of the plurality of container instances share a container identifier;
• selecting a first container instance having the container identifier;
• and
• based on the container instance having the container identifier, assigning the container instance a machine-learning-based control as a secure compute transition control.