The browser is the sandbox

kept by eddie jan 26

The browser's sandbox, tested by decades of web abuse, provides a secure environment for AI agents using the File System Access API.

the browser is the sandbox
The browser's 30-year-old sandbox model can be adapted to safely run AI agents locally, though gaps remain in network isolation and malicious file creation.
also on File System Access API, WebAssembly, Simon Willison, #browser-engineering, #security, #ai-agents
Arthur Cornil
Many SaaS apps don't need servers; shipping the full backend to the browser via WASM, SQLite, and OPFS enables local-first single-user apps.
also on WebAssembly, #browser-engineering
Making WebAssembly a first-class language on the Web
A proposal to make WebAssembly a first-class language on the web using the Component Model for direct Web API access, eliminating JavaScript glue code.
also on WebAssembly, #browser-engineering
Google Online Security Blog: Architecting Security for Agentic Capabilities in Chrome
Chrome introduces layered defenses like the User Alignment Critic and origin-based gating to protect users from indirect prompt injection during agentic browsing with Gemini.
also on Chrome, #browser-engineering, Google, #security, #ai-agents
The State of WebMCP: July 2026
WebMCP is a live Chrome origin trial standard with near‑zero adoption and no AI agent support yet, but site owners can prepare by adding tools and monitoring Lighthouse audits.
also on Chrome, #browser-engineering, Google, #ai-agents