On x86_64 the dynamic loader lives in /lib64, so the probe failed with "execvp /bin/true: No such file or directory" and shell commands of non-admin users were disabled on amd64 hosts. The sandbox itself already mounted it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>