sharkcage

Trust layer and sandboxing for OpenClaw — per-skill kernel sandboxing, capability model, tool interceptors