sandbox config

[oak token]

OpenClaw's sandbox.docker schema supports static binds plus dangerouslyAllowExternalBindSources. We have a workflow engine that creates per-session worktree paths outside the agent's workspace root and wants to mount one such worktree
into a single agent's container per dispatch. Does OpenClaw expose a dispatch-time API (e.g., on the gateway dispatch path or subagent-spawn surface) for injecting per-session sandbox.docker overrides like binds/env/user that override
the static agent config? If not, what's the recommended pattern for dynamic per-workflow mounts — extend the schema, or have the workflow engine spawn its own container with explicit mount and treat OpenClaw as the model dispatch
transport only?

[vast kernel]

To help others find answers, you can mark your question as solved via Right click solution message -> Apps -> ✅ Mark Solution

[oak token]

@sage furnace