Sandbox Enhancements and Fixes

This cluster focuses on improvements and fixes related to sandbox functionality within the OpenClaw framework.

11 PRs

fix docker tools Representative: #20991

#	Title	Author	Created	GitHub
4022	fix: apply sandbox tools denials in /tools/invoke	davidbors-snyk	2026-01-29	View
4897	fix: config logic issues (#4689, #4654)	lailoo	2026-01-30	View
7826	feat(sandbox): add Docker Sandboxes (microVM) as alternative backend	HODL-Community	2026-02-03	View
7851	feat: secure sandbox defaults for new installs	ichbinlucaskim	2026-02-03	View
7874	docs: add public/untrusted agent profile	ichbinlucaskim	2026-02-03	View
9657	fix(doctor): warn when sandbox mode enabled without Docker	mcaxtr	2026-02-05	View
11157	Add sandbox mode quick switcher for local models	pearyj	2026-02-07	View
20991	fix(sandbox): fall back to gateway UID:GID when no user is configured (#20979) rep	cluster2600	2026-02-19	View
23112	fix(sandbox): propagate docker.user to all exec commands	dashed	2026-02-22	View
23400	Onboarding: set sandbox defaults when Docker is available	bmendonca3	2026-02-22	View
23811	Config: fail closed when exec host=sandbox but sandbox mode is off	bmendonca3	2026-02-22	View