Reading up on File System Access API

The browser's 30-year-old sandbox model can be adapted to safely run AI agents locally, though gaps remain in network isolation and malicious file creation.

The browser's sandbox, tested by decades of web abuse, provides a secure environment for AI agents using the File System Access API.