act_runner drops --security-opt systempaths=unconfined, so /proc stays masked and bwrap cannot mount procfs (CI run 108), although the same options work with plain docker run on VM103. Privileged replaces the option list; job containers already hold the VM's Docker socket. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>