How I used a separate Linux machine, a fresh user account, read-only workflows and observable access to evaluate OpenClaw before allowing its first state-changing operations.