add conditional directives to the sandbox initializer to improve arch… #52

Job	Run time
Resilience: Privileged Syscall Denial	51s
Security: Network Namespace (Localhost Bridge)	57s
Resilience: Orphan Grandchild Reaping	1m 1s
Resource: Fork Bomb Containment	1m 0s
Security: Memory Limit (Hard OOM)	55s
Security: Filesystem Isolation (File Privacy)	52s
Security: Disk Cleanup (Storage Exhaustion)	1m 1s
Resilience: Signal Trap Uses SIGKILL Timeout	56s
Resilience: I/O Flood (Bounded Stderr)	52s
Resilience: Inode Exhaustion Safety	57s
	9m 22s

Provide feedback