add Lua sandbox with timer system (milestones 1-5 complete)

CLAUDE.md

@@ -33,6 +33,8 @@ Mosis is a **virtual smartphone OS** for VR games and applications. It provides
 | Android Service | `src/main/` | Native service running RmlUi renderer |
 | Desktop Designer | `designer/` | UI development with hot-reload |
 | Designer Tests | `designer-test/` | Automated UI testing framework |
+| Sandbox Tests | `sandbox-test/` | Lua sandbox security tests |
+| Lua Sandbox | `src/main/cpp/sandbox/` | Per-app Lua isolation |
 | UI Assets | `src/main/assets/` | Shared RML/RCSS/Lua assets |
 
 ## Build Commands
@@ -94,6 +96,27 @@ cmake --build build --config Debug
 ./build/Debug/designer-test.exe
 ```
 
+### Sandbox Security Tests (CMake)
+
+```bash
+# Configure (from sandbox-test/ folder)
+cmake -B build -DCMAKE_TOOLCHAIN_FILE=%VCPKG_ROOT%/scripts/buildsystems/vcpkg.cmake
+
+# Build
+cmake --build build --config Debug
+
+# Run all tests (uber command)
+./run_tests.bat
+
+# Or run directly
+./build/Debug/sandbox-test.exe
+
+# Run specific test
+./build/Debug/sandbox-test.exe --test DangerousGlobals
+./build/Debug/sandbox-test.exe --test Memory
+./build/Debug/sandbox-test.exe --test CPU
+```
+
 ## Environment Requirements
 
 Required environment variables: