docker run's implicit pull prints nothing and the 120s start timeout kills runs on slow mirrors; ensure_image brings the progress display, mirror chain and watchdog to per-instance pulls (each sample = its own image, 10 samples = 10 pulls). Co-Authored-By: Claude <noreply@anthropic.com>