bugfix

internal/acp/sandbox/sandbox_other.go

@@ -0,0 +1,9 @@
+//go:build !linux
+
+package sandbox
+
+// newPlatform returns nil on non-Linux platforms: UID drop, setrlimit and
+// bind-mount namespaces are Linux-only, so Windows dev and macOS always fall
+// back to the no-op sandbox (see New). This is the documented contract that
+// mode=none is the only supported mode off Linux.
+func newPlatform(_ Mode) Sandbox { return nil }