LLM-controlled execution sandbox for OpenClaw — tiered isolation, file diffing, rollback, and AI review