From 9f8eedc1ecccfbf7bcf63b9cb0bde91d5a614d41 Mon Sep 17 00:00:00 2001
From: "William K. Santiago" <william@privkey.io>
Date: Thu, 18 Jun 2026 11:02:11 -0400
Subject: [PATCH] Build wisp ReleaseSafe for diagnosable crash traces

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 843e5ab..baad613 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -38,7 +38,7 @@ WORKDIR /src
 # -Dcpu=baseline restricts codegen to the architecture's baseline ISA so the
 # binary runs on any x86_64/aarch64 CPU. Without it, zig targets the build
 # host's native CPU and the binary crashes with SIGILL on older/different CPUs.
-RUN zig build -Doptimize=ReleaseFast -Dcpu=baseline
+RUN zig build -Doptimize=ReleaseSafe -Dcpu=baseline
 
 FROM docker.io/library/debian:bookworm-slim