Oracle containers follow the naming pattern oracle- and are placed on a shared oracle-network Docker network (alongside oracle-hermes, oracle-mirofish, oracle-graphiti-mcp). New research capability containers should follow this topology. AutoResearchClaw runs generated experiment code internally so it MUST be containerized with experiment sandboxing isolated from the host — Docker-in-Docker or host Docker socket mount for inner sandbox containers.