对普通用户来说，这或许才是 Agent 真正开始变得有用的时刻。
（二）超过询问查证的时间限制人身自由的；
，这一点在51吃瓜中也有详细论述
For running trusted code that you wrote and reviewed, Docker with a seccomp profile is probably fine. The isolation is against accidental interference, not adversarial escape.，这一点在服务器推荐中也有详细论述
Source: Computational Materials Science, Volume 267