[SaladDay]

Removed

• The Docker sandbox adapter (services/core/internal/sandbox/docker, including its seccomp profile) and its registry entry; the Docker SDK dependencies in go.mod/go.sum.
• The Docker node installer path (deploy/node/host_docker.py, --provider docker), the runtime/seccomp.json distribution member and the policy artifact role (only Docker consumed them), and the regenerated catalog, node spec and TypeScript contract projections.
• Docker cases in Go, Python, Web unit and e2e tests; provider fixtures now use microsandbox or E2B. Two Worker integration tests were split because microsandbox needs workspace storage and E2B cannot coexist with it.
• Docker as a sandbox backend in docs, contracts, READMEs (English and Simplified Chinese, source_hash refreshed) and the website logo wall.

Kept

• Docker Compose installation of Core, Web and PostgreSQL, and Docker as its prerequisite.
• Building Runtime, Core and E2B template images with Docker; the self-hosted Runtime container notes in apps/daemon.
• example/parsar untouched.

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

[blacksmith-sh]

Found 2 test failures on Blacksmith runners:

Failures

Test	View Logs
e2e/ sandbox-generation.spec.ts:234:1 › uncertain configuration refresh preserves a draft un til its generation changes	View Logs
e2e/ sandbox-reset.spec.ts:315:1 › signing out clears pending reset ownership and a late res ponse cannot overwrite the new login	View Logs

^{Need help on this PR? Tag @codesmith-bot with what you need.}