Resolved both review findings for the Docker sandbox runtime.
ContainerSpec.memorynow maps directly tosbx create --memory, preserving the existing per-turn and per-check bound and no longer appearing as superseded.- Sandbox startup preflight now uses the documented
sbx versionsubcommand and reports failures with that exact command. - Updated exact argv/preflight unit coverage and corrected the ADR and operator documentation.
Checks: pnpm build, focused sandbox tests (18/18), pnpm lint, and pnpm test all passed. The existing real-sbx smoke test remains environment-gated because this runner has no authenticated Docker Desktop sandbox runtime.