Constant RUN_STATE_DIRS 

pub const RUN_STATE_DIRS: [&str; 5];

Every directory an in-sandbox fleet run must be able to write.

Add here FIRST, then use it. A directory the runner writes but this list omits fails only in the sandboxed path — the one nobody runs by hand.