Cgroups are important for stability, but they are not a security boundary. They prevent denial-of-service, not escape. A process constrained by cgroups still makes syscalls to the same kernel with the same attack surface.
最初，NoDesk只是为了内部使用，让自己的电商Agent业务团队基于OpenClaw提升效率。但开发完成后，团队感受到外界喷涌的需求，马上决定对外发布。2026年2月14日，DeskClaw个人版第一个版本上线。，这一点在新收录的资料中也有详细论述
‘혼인 신고’ 티파니♥변요한, SNS 팔로우도 ‘꾹’…본격 럽스타 시작，推荐阅读PDF资料获取更多信息
- CLAUDE.md — Project conventions with FD management section