> Okay, how can I make sure the right toolchain is used, *all*
> imports come from within sysroot and *only* code from the
> (building) HOST system is executed - *never* from TARGET ?

I would have expected your host system to refuse
to run binaries for the target architecture.

You are clearly doing far more complex things
than my simple brain can fathom.

Good luck.