Correction: Paperclip can provision sandbox compute through plugins; its Kubernetes provider documents process and network restrictions. My earlier claim that it provides no execution security was too broad. This does not establish OpenShell-equivalent controls.