Function sandbox_failure 

fn sandbox_failure(err: &Error) -> bool

Classify a TCP bind failure. Only a seccomp-style errno means the loader sandbox is in effect. A taken port (EADDRINUSE) is a plain “something else owns the port” and must never trigger the runtime unblock, and an unclassified error is conservatively treated as not a sandbox failure.