From the Claude Code quickstart.
What I’ve learned is that the common mistake is treating isolation as binary. It’s easy to assume that if you use Docker, you are isolated. The reality is that standard Docker gives you namespace isolation, which is just visibility walls on a shared kernel. Whether that is sufficient depends entirely on what you are protecting against.
。关于这个话题，safew官方下载提供了深入分析
Cluster & Border Point Definition: The map is divided into clusters, and border points are identified using the Ford-Fulkerson based method.
香港食環署提交立法會的討論文件指出，除火鍋店和燒烤店外，「所有持有正式牌照的餐廳均可申請成為狗隻友善食肆」。據食環署統計，截至2024年底，香港共有1.7萬家持牌餐廳；截至2025年底，共有約630家火鍋店和燒烤店——包括鐵板燒與韓式燒烤等。