This repository provides `oci-runtime-tool`, a command-line tool for generating and validating OCI (Open Container Initiative) runtime configuration files (`config.json`) according to the OCI Runtime Specification. It also includes `runtimetest`, a compliance testing binary that runs inside containers to verify runtime behavior against the specification. The project is written in Go and serves as both a utility for container runtime users and a conformance testing framework for runtime implementors. The architecture is a Go CLI built with the `urfave/cli` library, with two main commands: `generate` (creates `config.json` from command-line flags) and `validate` (checks a bundle's configuration against the spec). The compliance tests are standalone TAP-producing executables that exercise a real OCI runtime (default `runc`) through its lifecycle (create, start, state, kill, delete). The codebase is organized into packages for generation, validation, spec error handling, cgroup interaction, and file path utilities. Key data flows: The `generate` command collects flags and builds an OCI spec object, then serializes it to JSON. The `validate` command loads a bundle, parses the config, and runs a series of checks against the spec, filtering by compliance level. The `runtimetest` binary is copied into a container and executes checks on the runtime environment (cgroups, mounts, seccomp, capabilities, etc.), outputting TAP results. External dependencies include the OCI runtime (`runc`), cgroup filesystems, and network access for JSON schema downloads.