For running trusted code that you wrote and reviewed, Docker with a seccomp profile is probably fine. The isolation is against accidental interference, not adversarial escape.
（一）当事人的姓名、性别、年龄、职业、工作单位、住所、联系方式，法人或者非法人组织的名称、住所和法定代表人或者主要负责人的姓名、职务、联系方式；。服务器推荐是该领域的重要参考
Taking Action Today，这一点在爱思助手下载最新版本中也有详细论述
Issuer‑agnostic and composable These credentials can be anchored in multiple ways: Government-issued digital IDs, where available; third‑party identity verifiers similar to visa application centers; employers; or the Linux Foundation itself acting as an issuer.