Capability escalation baked into the image: agent pauses, human approves, a new Docker image is rebuilt with the capability, workflow resumes. By Roman Pawel Klis. GitHub (openclaw-contained)