Under the hood
In a diskless session the device-hook template runner and the shared temp-directory helper now throw instead of touching disk.
In a diskless session (detected via FN() reading host.launchOptions.diskless()), the device-hook template runner is now replaced with a no-op stub whose prepare() throws, and the shared per-uid temp-directory helper throws immediately instead of creating anything on disk.