Default sandbox controller mode to emulate

Author: volta2030

docker-compose.yml

@@ -22,8 +22,9 @@ services:
       context: ./sandbox_controller
     container_name: provity-sandbox-controller
     environment:
-      # Set to 'mock' to test wiring without a Windows VM.
-      SANDBOX_MODE: ${SANDBOX_MODE:-mock}
+      # Default to 'emulate' for docker-only dynamic verdicts.
+      # Use 'mock' for simple wiring tests; use 'winrm' to run on a Windows VM.
+      SANDBOX_MODE: ${SANDBOX_MODE:-emulate}
       SANDBOX_MAX_MB: ${SANDBOX_MAX_MB:-10}
 
       # WinRM target (required when SANDBOX_MODE=winrm)