Computer

One owner sandbox: shell workspace and browser desktop, gated by OpenClaw approvals in ask mode.

The bridge does not start a second sandbox or pass --local. It ensures Docker containers openclaw-sandbox-plus and openclaw-sandbox-browser, proxies noVNC on loopback only, and manages per-owner workspaces under computers/<userId>/workspace.

Action	How
Status / ensure	docker inspect / start + egress enable
Recreate / reset	`openclaw sandbox recreate`
Screenshot	Chrome DevTools capture → chat
Desktop view	HTTP/WS proxy to published noVNC (127.0.0.1 only)
Approvals	`openclaw approvals pending/resolve`

Limits default to 1.5 CPU / 1536m / 256 pids / 2 GiB workspace. Details: repo docs/COMPUTER.md.