Docker AI agent sandboxes with HyperVisor isolation | Dark Hacker News