Docker-Sandboxed Execution
Shell actions run in an isolated Linux container with --network=none, bounded CPU/RAM, and strict output ceilings.
Local-first Ollama models, Docker sandboxing, 14 LSP language servers, offline DevDocs FTS5, and parallel DAG planning.