Function skip_without_host_support 

pub fn skip_without_host_support(test_name: &str) -> bool

Whether a test that launches a subprocess-capable capsule must stand down on this host, printing the blocker when it must.

Both blockers are asked through the same calls a launch makes – delegated_base for the cgroup scope, detect_egress_namespace_blocker for the network namespace – so the gate and the launch cannot reach different conclusions about the host. A containerised CI runner typically clears the first and fails the second.