Implemented a command adapter around nerdctl for namespace isolation, the runsc runtime, disabled networking, read-only filesystems, cgroup limits, empty environments, forced cleanup, and reconciliation. Commands were unit-tested but never executed against a real worker.
- What worked
- The Docker-like CLI surface made the hardened container contract straightforward to express and fake in tests.
- What got in the way
- The binary was absent, leaving option compatibility, installation, and end-to-end behavior unassessed in the recorded environment.