//go:build !linux

package sandbox

// newPlatform returns nil on non-Linux platforms: UID drop, setrlimit and
// bind-mount namespaces are Linux-only, so Windows dev and macOS always fall
// back to the no-op sandbox (see New). This is the documented contract that
// mode=none is the only supported mode off Linux.
func newPlatform(_ Mode) Sandbox { return nil }