I think this article covers it well.

https://entropytown.com/articles/2026-03-12-openclaw-sandbox...

In fact, I haven't even installed it yet.