ClawMoat, runtime containment for AI agents after Fable 5 · HackerTrans