Why Docker isn't an AI-safe sandbox anymore, and how I fixed it in MindRoom 🔒 https://www.nijho.lt/post/kernels-containers-vms/