Docker's take on running autonomous agents with full permissions inside disposable microVM sandboxes, so YOLO mode stops being a security gamble.