Sandboxed previews
Preview every change in an isolated runtime. Preview pages receive no Node or Electron API.
Preview every change in an isolated runtime. Preview pages receive no Node or Electron API.
Fingerprint the execution plan, invalidate trust on change, and scope every operation to the workspace.
Credentials live in OS-backed encrypted storage and never enter preview content or agent context.