Also, I've been running OpenClaw using SmolVM on my macOS. It adds a hardware level isolation (using KVM).

https://github.com/CelestoAI/SmolVM/blob/main/examples/openc...