autoresearchclaw-must-run-in-isolated-container-not-hermes

AutoResearchClaw generates and executes arbitrary experiment code in its 23-stage pipeline. This code MUST run in a sandboxed container separate from oracle-hermes — never pip-installed into Hermes’s Python environment. The integration pattern is a dedicated ‘researchclaw’ container on oracle-network using Docker-in-Docker or host Docker socket for its own experiment sandbox. Coupling it with Hermes risks dependency conflicts and exposes the orchestrator to generated code execution.