1

Making OpenClaw safe: Docker isolation, scoped identity, and JIT secrets