Tech »  NanoClaw is in your Docker sandbox now - can this restrain AI agents from running amok?