Docker network clash on integration host cut off carrier traffic after new project deployed

An integration host running partner adapters in Docker Compose lost connectivity to a carrier reached over a VPN after a new project was deployed. Docker automatically assigned the new project a subnet, 172.25.0.0/16, that overlapped with the carrier's address range, which the host's default gateway routed through the tunnel. The new local bridge route redirected the carrier's traffic into an empty network, so bookings timed out until the project was stopped. The team fixed the issue by setting Docker's default address pools to a reserved block, recreating existing projects, and adding a pre-start check that compares bridge subnets with partner ranges.