autoresearchclaw-requires-dedicated-container-for-sandbox

AutoResearchClaw executes generated experiment code (Python, R, etc.) as part of its pipeline, which must run in an isolated sandbox — not inside the oracle-hermes container. The correct deployment is a dedicated researchclaw container on oracle-network alongside oracle-hermes, oracle-mirofish, and oracle-graphiti-mcp, using either Docker-in-Docker or host Docker socket mount for nested experiment containers. Installing inside an existing container risks dependency conflicts and removes the security boundary around arbitrary code execution.