forked from EduCraft/curriculum-project-hub
6ddc0b5bd1
Act/docker runners commonly block non-privileged user namespaces, so setpriv+CapEff=0 cannot run bwrap. Gate the proof on `unshare --user` and keep unit + remaining integration tests as the default CI net.