autoresearchclaw-requires-dedicated-container-for-experiment-sandboxing

AutoResearchClaw executes generated experiment code as part of its pipeline, which mandates container isolation — running it inside oracle-hermes or on the host creates a security and stability risk. The correct deployment is a dedicated researchclaw container on oracle-network, following the existing oracle-* topology. This container needs access to the host Docker socket (or Docker-in-Docker) so its own experiment sandbox containers can spin up. Dependency conflicts with Hermes’s Python environment were a secondary reason for isolation.