Esc

Public software archaeology · March 2025

Lost Apps Museum

Ninety-six public WordPress HTML uploads resolved into 27 byte-distinct files and 22 curated application families. This museum preserves provenance and verified behavior without importing historical code, branding, wording, or assets into the clean-room restorations.

22
curated families
96
public HTML uploads
3
clean-room restorations
0
historical embeds approved

The collection

Browse all 22 app families

Showing all 22 exhibits

Agent Workbenches medium risk

Agent Workflow System

A browser-based agent workflow workshop that could assemble and simulate multi-step agent plans without a live agent backend.

Needs hardening 1 archived filename Clean-room lesson available
Open historical artifact ↗
Evidence, safety, and related work

Observed behavior

Local workflow designer with an agent palette, configurable ordered steps, prompt and JSON editors, workflow and agent import, JSON export and deterministic mock execution.

  • Import Agent
  • Import Workflow
  • Workflow Name
  • Save Workflow
  • Export Workflow
  • Add Step
  • Run Workflow
  • Configure Step
  • Select Agent
  • Select Skills
  • System Prompt
  • Mock Parameters

Preservation posture

Use a separate sandboxed origin, sanitize imported metadata and self-host pinned editor assets.

  • Medium: Imported names and configuration values are used in dynamically generated HTML.
  • Low: Python files are parsed for metadata but not executed; execution results are explicitly mocked.

Provenance

Representative: Agent-Workflow-System.html

WordPress media IDs: 544, 588, 598, 625

  • Media 544 · 42579 bytes · sha256:3593f9701403bec952020ee9907323050cdd8dbf534a1377541202a7e8df5e8f
  • Media 588 · 42579 bytes · sha256:3593f9701403bec952020ee9907323050cdd8dbf534a1377541202a7e8df5e8f
  • Media 598 · 42579 bytes · sha256:3593f9701403bec952020ee9907323050cdd8dbf534a1377541202a7e8df5e8f
  • Media 625 · 42579 bytes · sha256:3593f9701403bec952020ee9907323050cdd8dbf534a1377541202a7e8df5e8f
  • kodyw.com:/wp-content/uploads/2025/03/Agent-Workflow-System.html:29-106
  • kodyw.com:/wp-content/uploads/2025/03/Agent-Workflow-System.html:600-694
  • kodyw.com:/wp-content/uploads/2025/03/Agent-Workflow-System.html:730-819

RAPP Vision angle

16:9: How to design a visual agent workflow editor without accidentally building a remote-code execution engine.

9:16: Three workflow nodes, zero agents, one surprisingly complete prototype.

Copilot Prototypes medium risk

Microsoft Copilot — Automated Actions

A persuasive enterprise automation prototype whose safest feature is that its emails, CRM changes and memory operations are simulated.

Restoration candidate 1 archived filename
Evidence, safety, and related work

Observed behavior

Enterprise action-card prototype with Email, Dynamics 365 and Memory filters, editable commands, action chaining, workflow execution and JSON import or export. Results are generated by a hardcoded simulation branch.

  • Import Conversation
  • Export Actions
  • Create Workflow
  • Category Filters
  • Edit Command
  • Run Action
  • Connect to another action
  • Run Workflow
  • Clear Imported Actions

Preservation posture

Embed only a clearly labeled simulation on an isolated origin; remove or disable the localhost backend branch.

  • Medium: The dormant live-response branch formats backend content into innerHTML without a dedicated sanitizer.
  • Low: Action labels imply real email and CRM operations, but simulateAPI is set to true.

Provenance

Representative: automated-actions-ui.html

WordPress media IDs: 543, 545, 583, 599, 626

  • Media 543 · 81303 bytes · sha256:0156fb1d56d85e4365858a82d003e65063547e2383ddadf24cbe0f30ba44d3c1
  • Media 545 · 81303 bytes · sha256:0156fb1d56d85e4365858a82d003e65063547e2383ddadf24cbe0f30ba44d3c1
  • Media 583 · 81303 bytes · sha256:0156fb1d56d85e4365858a82d003e65063547e2383ddadf24cbe0f30ba44d3c1
  • Media 599 · 81303 bytes · sha256:0156fb1d56d85e4365858a82d003e65063547e2383ddadf24cbe0f30ba44d3c1
  • Media 626 · 81303 bytes · sha256:0156fb1d56d85e4365858a82d003e65063547e2383ddadf24cbe0f30ba44d3c1
  • kodyw.com:/wp-content/uploads/2025/03/automated-actions-ui.html:718-839
  • kodyw.com:/wp-content/uploads/2025/03/automated-actions-ui.html:1069-1115
  • kodyw.com:/wp-content/uploads/2025/03/automated-actions-ui.html:1200-1303

RAPP Vision angle

16:9: Prototype enterprise automation safely before connecting a single production system.

9:16: This CRM automation demo has a secret: every result is fake on purpose.

Playable Software critical risk

RetroPlay Console

A Game Boy-shaped browser app store that treated JSON files as downloadable game cartridges.

Needs hardening 3 archived filenames
Evidence, safety, and related work

Observed behavior

Handheld browser-console family with D-pad, A/B, Start and Select controls, keyboard and touch input, Canvas games, a game library, JSON cartridge import and export, fullscreen handling and GitHub browsing.

  • D-pad
  • A
  • B
  • Start
  • Select
  • Fullscreen
  • RetroPlay Store
  • Upload Game
  • Browse GitHub
  • Export Game

Preservation posture

Do not embed with cartridge import enabled. Replace executable cartridges with a strictly validated data-only format.

  • Critical: Desktop and iOS variants construct imported game methods with new Function, allowing cartridge-supplied JavaScript execution.
  • Medium: Several hardcoded GitHub game-cartridge URLs returned HTTP 404.

Provenance

Representative: complete-retroplay-console-ios.html

WordPress media IDs: 534, 535, 536, 546, 547, 551, 574, 575, 576, 600, 601, 605, 627, 628

  • Media 534 · 106564 bytes · sha256:decd9c2e42ca2df25056e0b40b15e3558543e35c92e4c168c081ab5588fc6850
  • Media 535 · 77739 bytes · sha256:8275bd57e7395111db713d9157f509be5f685cc1abcacc350fd0b25681f61d2e
  • Media 536 · 103424 bytes · sha256:5b08a5f3576cb00397422ccfafc4731505654428a9463dc2af74233a31645968
  • Media 546 · 106564 bytes · sha256:decd9c2e42ca2df25056e0b40b15e3558543e35c92e4c168c081ab5588fc6850
  • Media 547 · 77739 bytes · sha256:8275bd57e7395111db713d9157f509be5f685cc1abcacc350fd0b25681f61d2e
  • Media 551 · 103424 bytes · sha256:5b08a5f3576cb00397422ccfafc4731505654428a9463dc2af74233a31645968
  • Media 574 · 106564 bytes · sha256:decd9c2e42ca2df25056e0b40b15e3558543e35c92e4c168c081ab5588fc6850
  • Media 575 · 77739 bytes · sha256:8275bd57e7395111db713d9157f509be5f685cc1abcacc350fd0b25681f61d2e
  • Media 576 · 103424 bytes · sha256:5b08a5f3576cb00397422ccfafc4731505654428a9463dc2af74233a31645968
  • Media 600 · 106564 bytes · sha256:decd9c2e42ca2df25056e0b40b15e3558543e35c92e4c168c081ab5588fc6850
  • Media 601 · 77739 bytes · sha256:8275bd57e7395111db713d9157f509be5f685cc1abcacc350fd0b25681f61d2e
  • Media 605 · 103424 bytes · sha256:5b08a5f3576cb00397422ccfafc4731505654428a9463dc2af74233a31645968
  • Media 627 · 106564 bytes · sha256:decd9c2e42ca2df25056e0b40b15e3558543e35c92e4c168c081ab5588fc6850
  • Media 628 · 77739 bytes · sha256:8275bd57e7395111db713d9157f509be5f685cc1abcacc350fd0b25681f61d2e
  • kodyw.com:/wp-content/uploads/2025/03/complete-retroplay-console-ios.html:923-1015
  • kodyw.com:/wp-content/uploads/2025/03/complete-retroplay-console-ios.html:2294-2353
  • kodyw.com:/wp-content/uploads/2025/03/complete-retroplay-console.html:888-1000
  • kodyw.com:/wp-content/uploads/2025/03/gameboy-clone.html:2170-2287

RAPP Vision angle

16:9: Rebuilding a browser game console while replacing executable JSON with a safe cartridge specification.

9:16: Would you install a JSON game cartridge if it could execute JavaScript?

Business Systems high risk

CRM Questionnaire Progress Viewer

A single-file CRM assessment workstation combining progress measurement, evidence tracking, editing and report export.

Restoration candidate 1 archived filename
Evidence, safety, and related work

Observed behavior

Offline questionnaire dashboard that imports JSON, calculates question and requirement completion, searches records, edits answers and metadata, records confidence and sources, deletes answers, prints and exports HTML or CSV.

  • Upload JSON File
  • Search
  • Export Report
  • Print Report
  • Save Changes
  • Edit Question
  • Edit Requirement
  • Delete Answer
  • Confidence
  • Source Citation
  • HTML Export
  • CSV Export

Preservation posture

Use a sandboxed restoration with schema validation and text-only rendering of imported values.

  • High: Imported questionnaire strings are assembled into innerHTML without verified sanitization.

Provenance

Representative: crm-questionnaire-viewer.html

WordPress media IDs: 540, 548, 580, 602, 629

  • Media 540 · 109780 bytes · sha256:e99d519ceda61dc39d2e6ad742ab25289d02a6d67b2ea33731567d6683621d15
  • Media 548 · 109780 bytes · sha256:e99d519ceda61dc39d2e6ad742ab25289d02a6d67b2ea33731567d6683621d15
  • Media 580 · 109780 bytes · sha256:e99d519ceda61dc39d2e6ad742ab25289d02a6d67b2ea33731567d6683621d15
  • Media 602 · 109780 bytes · sha256:e99d519ceda61dc39d2e6ad742ab25289d02a6d67b2ea33731567d6683621d15
  • Media 629 · 109780 bytes · sha256:e99d519ceda61dc39d2e6ad742ab25289d02a6d67b2ea33731567d6683621d15
  • kodyw.com:/wp-content/uploads/2025/03/crm-questionnaire-viewer.html:618-730
  • kodyw.com:/wp-content/uploads/2025/03/crm-questionnaire-viewer.html:1068-1076
  • kodyw.com:/wp-content/uploads/2025/03/crm-questionnaire-viewer.html:2037-2341

RAPP Vision angle

16:9: How to build an offline assessment dashboard from nothing but a JSON contract.

9:16: Change one CRM answer and watch three dashboard measurements update.

Copilot Prototypes medium risk

MAC Automated Actions

A pocket-sized Copilot action launcher that convincingly demonstrated enterprise outcomes with canned local responses.

Restoration candidate 2 archived filenames
Evidence, safety, and related work

Observed behavior

Compact quick-action interface for email, meetings, opportunities, lead creation, memory, document processing and auto-answering, with theme selection, imported actions, export and simulated formatted responses.

  • Theme
  • Settings
  • Quick Actions
  • Run Action
  • Import Actions
  • Export Actions
  • Clear Imported Actions
  • Clear Response

Preservation posture

Use only as an isolated, explicitly simulated restoration with safe response formatting.

  • Medium: Formatted response text is inserted into innerHTML without a dedicated sanitizer.
  • Low: The Settings button appeared unreferenced during static inspection.

Provenance

Representative: custom-copilot-ui.html

WordPress media IDs: 542, 549, 582, 603

  • Media 542 · 48441 bytes · sha256:c830180c94b29e8288cf81c4c46f6ff1c666160bd588c0ffcbf48441145b39dd
  • Media 549 · 48441 bytes · sha256:c830180c94b29e8288cf81c4c46f6ff1c666160bd588c0ffcbf48441145b39dd
  • Media 582 · 48441 bytes · sha256:c830180c94b29e8288cf81c4c46f6ff1c666160bd588c0ffcbf48441145b39dd
  • Media 603 · 48441 bytes · sha256:c830180c94b29e8288cf81c4c46f6ff1c666160bd588c0ffcbf48441145b39dd
  • kodyw.com:/wp-content/uploads/2025/03/custom-copilot-ui.html:514-670
  • kodyw.com:/wp-content/uploads/2025/03/custom-copilot-ui.html:715-856

RAPP Vision angle

16:9: Designing believable Copilot prototypes with deterministic fixtures instead of risky integrations.

9:16: This Copilot action looks live. Here is why it safely is not.

Sensitive Human-Centered Experiments high risk

EMDR Therapy Assistant

A technically ambitious but sensitive browser experiment combining guided motion, self-rating, reflection, charting and portable session files.

Context only 2 archived filenames
Evidence, safety, and related work

Observed behavior

Mental-health-adjacent prototype collecting a target-memory description and 0-10 distress rating, guiding timed eye-movement sets and breathing, recording observations, charting SUDS history and importing or exporting session JSON.

  • Import Session
  • Save Session
  • Memory Entry
  • Distress Slider
  • Start Processing
  • Start Immersive Session
  • Pause
  • Stop Session
  • Speed
  • Current Distress
  • Observations
  • Continue to Next Set

Preservation posture

Present as a contextual historical exhibit only. A rebuild should be explicitly non-clinical, local-only, consent-based and easy to stop or delete.

  • High: Health-related journal text and ratings are stored unencrypted in localStorage and export files.
  • High: Imported therapist insight content is inserted into HTML and may imply clinical authority.
  • Medium: The interface uses terms such as AI Therapist Analysis despite being a browser prototype.

Provenance

Representative: emdr-complete.html

WordPress media IDs: 550, 597, 604

  • Media 550 · 95061 bytes · sha256:9a02b6e7ef3a512c98dffae434c544cf6571c3bb130e1b38e50e3fc8742f37ae
  • Media 597 · 95061 bytes · sha256:9a02b6e7ef3a512c98dffae434c544cf6571c3bb130e1b38e50e3fc8742f37ae
  • Media 604 · 95061 bytes · sha256:9a02b6e7ef3a512c98dffae434c544cf6571c3bb130e1b38e50e3fc8742f37ae
  • kodyw.com:/wp-content/uploads/2025/03/emdr-complete.html:437-780
  • kodyw.com:/wp-content/uploads/2025/03/emdr-complete.html:887-940
  • kodyw.com:/wp-content/uploads/2025/03/emdr-complete.html:1191-1229
  • kodyw.com:/wp-content/uploads/2025/03/emdr-complete.html:1811-1872
  • kodyw.com:/wp-content/uploads/2025/03/emdr-complete.html:2530-2562

RAPP Vision angle

16:9: What a mental-health-adjacent app teaches about consent, privacy, language and product boundaries.

9:16: The most important feature in this rebuild is not animation. It is the Stop button.

Business Systems critical risk

Slipspace Business Dashboard

A sales dashboard imagined as a universe-switching agent platform, preserved alongside two visibly unfinished fragments.

Needs hardening 3 archived filenames
Evidence, safety, and related work

Observed behavior

Fictional sales dashboard with opportunity metrics and filters, reports, agent insights, configurable agents, universe management, theme settings, JSON parameters and local persistence.

  • Dashboard
  • Opportunities
  • Agents
  • Universes
  • Settings
  • Generate Daily Report
  • Filters
  • Run Agent Analysis
  • New Agent
  • Configure
  • Run
  • Stop
  • Import Universe
  • Edit Universe

Preservation posture

Use only the complete variant for documentation. Replace executable agent code with an allowlisted data model before interactive restoration.

  • Critical: Configured agent code is executed with new Function.
  • High: The improved-dashboard and splitspace-copy variants terminate in the middle of CSS or JavaScript.

Provenance

Representative: splitspace-1.html

WordPress media IDs: 552, 562, 563, 571, 572, 573, 606, 616, 617

  • Media 552 · 28470 bytes · sha256:ec38b460ade7ef0e6e0d582b078ba0063075a7b859fbacbb18cc79633a2146c3
  • Media 562 · 190070 bytes · sha256:e7fa0f3aaff274f91314854f5c79d5e4c30d681c2e39a0648710006a7c016bab
  • Media 563 · 230340 bytes · sha256:7db069e6c3d4ccc4d6ea6052a2f3672c7c486eea08bae18ec3b649e12bfac66b
  • Media 571 · 28470 bytes · sha256:ec38b460ade7ef0e6e0d582b078ba0063075a7b859fbacbb18cc79633a2146c3
  • Media 572 · 190070 bytes · sha256:e7fa0f3aaff274f91314854f5c79d5e4c30d681c2e39a0648710006a7c016bab
  • Media 573 · 230340 bytes · sha256:7db069e6c3d4ccc4d6ea6052a2f3672c7c486eea08bae18ec3b649e12bfac66b
  • Media 606 · 28470 bytes · sha256:ec38b460ade7ef0e6e0d582b078ba0063075a7b859fbacbb18cc79633a2146c3
  • Media 616 · 190070 bytes · sha256:e7fa0f3aaff274f91314854f5c79d5e4c30d681c2e39a0648710006a7c016bab
  • Media 617 · 230340 bytes · sha256:7db069e6c3d4ccc4d6ea6052a2f3672c7c486eea08bae18ec3b649e12bfac66b
  • kodyw.com:/wp-content/uploads/2025/03/splitspace-1.html:1352-1607
  • kodyw.com:/wp-content/uploads/2025/03/splitspace-1.html:3312-3409
  • kodyw.com:/wp-content/uploads/2025/03/improved-dashboard.html:986-1005
  • kodyw.com:/wp-content/uploads/2025/03/splitspace-copy.html:4187-4221

RAPP Vision angle

16:9: Rebuilding an AI sales dashboard without letting configurable agents execute arbitrary code.

9:16: This CRM has parallel universes and one dangerous JavaScript shortcut.

Local-First Utilities high risk

Utility Apps Hub

A tiny local app store for organizing standalone HTML utilities without a server or database.

Restoration candidate 1 archived filename
Evidence, safety, and related work

Observed behavior

Editable local catalog of mini-application cards with titles, descriptions, tags, icons, paths, add, edit, delete, local persistence and JSON configuration import or export.

  • Settings
  • Import Apps Configuration
  • Export Current Configuration
  • Add New App
  • Edit App
  • Delete App
  • Title
  • Description
  • Path or URL
  • Tags
  • Icon

Preservation posture

Use safe DOM construction and reject javascript, executable data URLs and malformed destinations.

  • High: Imported card data and user-provided URLs are placed into generated HTML without strict URL-scheme validation.

Provenance

Representative: index.html

WordPress media IDs: 554, 596, 608

  • Media 554 · 23193 bytes · sha256:9578f513595dc391d1141dbcc38c51087d10a01271870b4219cb15af68323fde
  • Media 596 · 23193 bytes · sha256:9578f513595dc391d1141dbcc38c51087d10a01271870b4219cb15af68323fde
  • Media 608 · 23193 bytes · sha256:9578f513595dc391d1141dbcc38c51087d10a01271870b4219cb15af68323fde
  • kodyw.com:/wp-content/uploads/2025/03/index.html:297-314
  • kodyw.com:/wp-content/uploads/2025/03/index.html:323-450

RAPP Vision angle

16:9: Build your own private app store with localStorage, JSON and strict link validation.

9:16: A complete app store in one HTML file, until someone pastes a dangerous URL.

Copilot Prototypes high risk

MAC — Migration Assessment Copilot

A migration chat prototype with multiple identities and a branching Time Machine for replaying alternate conversation paths.

Needs hardening 2 archived filenames
Evidence, safety, and related work

Observed behavior

Chat client with multiple user GUIDs, import and export, theme and sound controls, conversation clearing, timeline playback and branching from earlier messages through a Time Machine interface.

  • Manage User IDs
  • Create New GUID
  • Clear Chat
  • Theme
  • Sounds
  • Export Chat
  • Import Chat
  • Export GUIDs
  • Import GUIDs
  • Time Machine
  • Previous
  • Play or Pause
  • Next
  • Create Branch
  • Send Message

Preservation posture

Use a local mock transport and session-only credentials. Sanitize messages and isolate storage by exhibit.

  • High: The function key is stored in localStorage.
  • Medium: The default backend targets localhost and is not a generally available public service.
  • High: Formatted API content is inserted into dynamic HTML.

Provenance

Representative: index_MAC.html

WordPress media IDs: 553, 590, 607

  • Media 553 · 89721 bytes · sha256:c277a263d88c914492d80c73bd7ea816c81abf48733217ba25934b12f6d1ad1d
  • Media 590 · 89721 bytes · sha256:c277a263d88c914492d80c73bd7ea816c81abf48733217ba25934b12f6d1ad1d
  • Media 607 · 89721 bytes · sha256:c277a263d88c914492d80c73bd7ea816c81abf48733217ba25934b12f6d1ad1d
  • kodyw.com:/wp-content/uploads/2025/03/index_MAC.html:984-1095
  • kodyw.com:/wp-content/uploads/2025/03/index_MAC.html:1184-1197
  • kodyw.com:/wp-content/uploads/2025/03/index_MAC.html:2191-2204
  • kodyw.com:/wp-content/uploads/2025/03/index_MAC.html:2423-2496

RAPP Vision angle

16:9: How to model branching conversation history without a database or live AI service.

9:16: Chat history, but with Git-style branches.

Local-First Utilities medium risk

GitHub Repository Viewer

A one-page attempt to turn a public GitHub repository into an instant application gallery.

Needs hardening 1 archived filename
Evidence, safety, and related work

Observed behavior

Read-only viewer that fetches the public kody-w/localFirstTools Git tree, lists HTML files, attempts to load an optional utility-app catalog and builds Apps and Files tabs.

  • Apps Tab
  • Files Tab
  • Repository Link
  • Open App

Preservation posture

Link to GitHub blob pages or use a separately sandboxed preview. Never execute repository HTML in the viewer's trusted origin.

  • Medium: Repository-provided metadata is inserted into generated HTML.
  • Medium: Fallback catalog links are stale, and raw GitHub URLs are unsuitable as trusted executable application destinations.

Provenance

Representative: local-browser.html

WordPress media IDs: 555, 589, 609

  • Media 555 · 15400 bytes · sha256:48e2bc7fd8cd87adc5534a809d2eab919930371bac4497cf7ad77d8b9b6ce21f
  • Media 589 · 15400 bytes · sha256:48e2bc7fd8cd87adc5534a809d2eab919930371bac4497cf7ad77d8b9b6ce21f
  • Media 609 · 15400 bytes · sha256:48e2bc7fd8cd87adc5534a809d2eab919930371bac4497cf7ad77d8b9b6ce21f
  • kodyw.com:/wp-content/uploads/2025/03/local-browser.html:228-299
  • kodyw.com:/wp-content/uploads/2025/03/local-browser.html:302-390

RAPP Vision angle

16:9: Turning any public GitHub repository into a safe, browsable museum catalog.

9:16: A GitHub repo becomes an app store, until its catalog file disappears.

Agent Workbenches high risk

Magentic Copilot

An agent marketplace and workflow editor that could transform a visual workflow into an editable command queue.

Needs hardening 2 archived filenames
Evidence, safety, and related work

Observed behavior

Workflow-gallery and queue prototype with agent lists, connections, natural-language commands, workflow-to-queue conversion, editing, chat, JSON import or export, themes and configurable API settings.

  • App Store
  • Create Workflow
  • Edit Workflow
  • Export
  • Import
  • Convert to Queue
  • Run Workflow
  • Open Chat
  • Add Command
  • Run Queue
  • Convert to Workflow
  • API Key
  • API Endpoint

Preservation posture

Use the complete variant only for reference. Provide a local simulator, schema validation and session-only optional credentials.

  • High: API endpoint and key are stored in localStorage in the complete variant.
  • High: magentic-agents-ui.html terminates in the middle of renderCommandQueue and fails JavaScript syntax checking.
  • Medium: Imported and backend-provided data is dynamically rendered.

Provenance

Representative: magentic-copilot.html

WordPress media IDs: 537, 538, 556, 557, 577, 578, 610, 611

  • Media 537 · 125221 bytes · sha256:a061df78d7f0b5479675557714a253f1ea00e9690437c56454926201edbc1be6
  • Media 538 · 62172 bytes · sha256:8fe846a698753c11877d2f5a635036ea29b25a3180cced649923bbe311bc62c0
  • Media 556 · 62172 bytes · sha256:8fe846a698753c11877d2f5a635036ea29b25a3180cced649923bbe311bc62c0
  • Media 557 · 125221 bytes · sha256:a061df78d7f0b5479675557714a253f1ea00e9690437c56454926201edbc1be6
  • Media 577 · 125221 bytes · sha256:a061df78d7f0b5479675557714a253f1ea00e9690437c56454926201edbc1be6
  • Media 578 · 62172 bytes · sha256:8fe846a698753c11877d2f5a635036ea29b25a3180cced649923bbe311bc62c0
  • Media 610 · 62172 bytes · sha256:8fe846a698753c11877d2f5a635036ea29b25a3180cced649923bbe311bc62c0
  • Media 611 · 125221 bytes · sha256:a061df78d7f0b5479675557714a253f1ea00e9690437c56454926201edbc1be6
  • kodyw.com:/wp-content/uploads/2025/03/magentic-copilot.html:973-1181
  • kodyw.com:/wp-content/uploads/2025/03/magentic-copilot.html:1486-1510
  • kodyw.com:/wp-content/uploads/2025/03/magentic-copilot.html:1826-1881
  • kodyw.com:/wp-content/uploads/2025/03/magentic-agents-ui.html:1686-1700

RAPP Vision angle

16:9: A reversible data model for switching between visual workflows and command queues.

9:16: Turn a visual AI workflow into a queue in one click.

Agent Workbenches high risk

Microsoft Copilot — Storytelling Workflows

A visual storytelling metaphor for composing multi-agent work by dragging characters onto a stage and connecting their handoffs.

Needs hardening 1 archived filename
Evidence, safety, and related work

Observed behavior

Visual workflow canvas with a searchable agent catalog, draggable agents, directional connections, agent and handoff configuration, workflow tabs, run and stop controls, responses, chat and JSON import or export.

  • Import
  • Export
  • Edit Workflow
  • Save
  • Run Workflow
  • Stop Workflow
  • Search Agents
  • Add Agent
  • Configure Agent
  • Configure Connection
  • Chat with Assistant
  • Create Workflow

Preservation posture

Use a local simulator and safe text rendering on an isolated origin.

  • Medium: Execution functions target a localhost backend unavailable as a general public service.
  • High: Imported workflow and response fields are inserted through dynamic HTML.

Provenance

Representative: magnetic-agents-ui.html

WordPress media IDs: 541, 558, 581, 612

  • Media 541 · 154436 bytes · sha256:96096271f362a2d82b603712266851e7c7ed9dd262befbdf435a9b44bcdf1bbf
  • Media 558 · 154436 bytes · sha256:96096271f362a2d82b603712266851e7c7ed9dd262befbdf435a9b44bcdf1bbf
  • Media 581 · 154436 bytes · sha256:96096271f362a2d82b603712266851e7c7ed9dd262befbdf435a9b44bcdf1bbf
  • Media 612 · 154436 bytes · sha256:96096271f362a2d82b603712266851e7c7ed9dd262befbdf435a9b44bcdf1bbf
  • kodyw.com:/wp-content/uploads/2025/03/magnetic-agents-ui.html:1466-1870
  • kodyw.com:/wp-content/uploads/2025/03/magnetic-agents-ui.html:2044-2044
  • kodyw.com:/wp-content/uploads/2025/03/magnetic-agents-ui.html:2811-2811

RAPP Vision angle

16:9: How to build a persistent visual graph editor with draggable nodes and live connectors.

9:16: Drag two agents. Draw one line. You have made a workflow.

Local-First Utilities high risk

Mermaid Diagram Viewer

A minimal diagram laboratory whose loose renderer configuration turns a simple utility into a clear security lesson.

Restoration candidate 1 archived filename
Evidence, safety, and related work

Observed behavior

Compact Mermaid editor that renders diagrams, caches source code locally and exports either rendered SVG or source text.

  • Mermaid Code
  • Render
  • Export Diagram SVG
  • Export Code TXT

Preservation posture

Upgrade to a pinned current Mermaid release, strict mode and sanitized SVG output before embedding.

  • High: Mermaid is initialized with securityLevel set to loose.
  • High: User-provided diagram source is inserted into innerHTML.

Provenance

Representative: mermaid-viewer.html

WordPress media IDs: 559, 595, 613

  • Media 559 · 6412 bytes · sha256:3d211262b42e3773fb32bb9b64e6e574da3924a961f2779d1963d017a270f993
  • Media 595 · 6412 bytes · sha256:3d211262b42e3773fb32bb9b64e6e574da3924a961f2779d1963d017a270f993
  • Media 613 · 6412 bytes · sha256:3d211262b42e3773fb32bb9b64e6e574da3924a961f2779d1963d017a270f993
  • kodyw.com:/wp-content/uploads/2025/03/mermaid-viewer.html:85-145

RAPP Vision angle

16:9: Rebuild a Mermaid playground and learn where diagram syntax becomes a security boundary.

9:16: One Mermaid setting turns a diagram viewer into a security lesson.

Playable Software medium risk

LUMON MDR / Severance Refiner

A mysterious retro-corporate number game built around selecting values that simply feel wrong.

Restoration candidate 2 archived filenames Clean-room lesson available
Open historical artifact ↗
Evidence, safety, and related work

Observed behavior

Fictional number-refinement game that generates number grids, tracks selected tiles, calculates accuracy, animates successful rounds, advances a five-batch quota and supports a new session.

  • Number Tiles
  • Refine Batch
  • Begin New Session

Preservation posture

The historical artifact may be shown contextually, but a clean-room playable restoration should use original branding, language and visuals.

  • Medium: The title and presentation are recognizably inspired by an existing entertainment franchise.

Provenance

Representative: severance-refiner.html

WordPress media IDs: 560, 585, 614

  • Media 560 · 10814 bytes · sha256:5556d967b661d52b6a1a2308e37d9b22f0e592e8e5de72af14da09e75da9a707
  • Media 585 · 10814 bytes · sha256:5556d967b661d52b6a1a2308e37d9b22f0e592e8e5de72af14da09e75da9a707
  • Media 614 · 10814 bytes · sha256:5556d967b661d52b6a1a2308e37d9b22f0e592e8e5de72af14da09e75da9a707
  • kodyw.com:/wp-content/uploads/2025/03/severance-refiner.html:285-375

RAPP Vision angle

16:9: Reverse-engineering a mysterious selection mechanic into a deterministic state-machine game.

9:16: Which of these numbers looks scary?

Playable Software No recorded risk

Worm Game Deluxe

A playful inversion of Snake where the player controls lunch instead of the creature chasing it.

Restoration candidate 1 archived filename
Evidence, safety, and related work

Observed behavior

Inverse-snake game in which the worm moves autonomously while the player repositions food using keyboard, pointer or touch input. It tracks score, high score, length and survival time.

  • Start Game
  • Arrow Keys
  • Mouse
  • Touch
  • Play Again

Preservation posture

Low functional risk, but preserve on an isolated sandboxed origin and self-host the font.

No specific implementation risk was recorded beyond the collection-wide isolation policy.

Provenance

Representative: snake-2-game.html

WordPress media IDs: 561, 593, 615

  • Media 561 · 12584 bytes · sha256:0e173ff705a0728907a3a279cb1f5249d0d4d1296cfc63c570d449ed9e9daf33
  • Media 593 · 12584 bytes · sha256:0e173ff705a0728907a3a279cb1f5249d0d4d1296cfc63c570d449ed9e9daf33
  • Media 615 · 12584 bytes · sha256:0e173ff705a0728907a3a279cb1f5249d0d4d1296cfc63c570d449ed9e9daf33
  • kodyw.com:/wp-content/uploads/2025/03/snake-2-game.html:185-217
  • kodyw.com:/wp-content/uploads/2025/03/snake-2-game.html:345-348

RAPP Vision angle

16:9: How changing one control assumption creates a completely different arcade game.

9:16: You are not the snake. You are lunch.

Local-First Utilities high risk

Pomodoro Kanban Board

A focused productivity experiment linking Kanban status directly to completed Pomodoro sessions.

Restoration candidate 1 archived filename
Evidence, safety, and related work

Observed behavior

Three-column Kanban board with drag-and-drop status changes, a 25-minute timer, focus-task selection, Pomodoro counters and JSON import or export.

  • Start
  • Pause
  • Reset
  • Focus Task
  • Import File
  • Export JSON
  • To Do
  • In Progress
  • Done
  • Drag and Drop

Preservation posture

Use neutral fixtures and text-only rendering on an isolated origin.

  • High: Imported task titles and descriptions are placed into innerHTML.
  • Medium: The historical file includes specific sample work items that should not be reused as public lesson fixtures.

Provenance

Representative: task-flow.html

WordPress media IDs: 564, 584, 618

  • Media 564 · 14340 bytes · sha256:eb3accd067a34255d7c759e8589dc5336c98ce20518a7070d65ba83759d58661
  • Media 584 · 14340 bytes · sha256:eb3accd067a34255d7c759e8589dc5336c98ce20518a7070d65ba83759d58661
  • Media 618 · 14340 bytes · sha256:eb3accd067a34255d7c759e8589dc5336c98ce20518a7070d65ba83759d58661
  • kodyw.com:/wp-content/uploads/2025/03/task-flow.html:69-105
  • kodyw.com:/wp-content/uploads/2025/03/task-flow.html:340-479

RAPP Vision angle

16:9: Build a Kanban board where the timer updates the data model, not just the screen.

9:16: Drag task. Start timer. Earn one Pomodoro.

Local-First Utilities high risk

Task Tracker

A durable offline task manager that appears to work despite losing its only referenced third-party script.

Restoration candidate 1 archived filename
Evidence, safety, and related work

Observed behavior

Offline task CRUD utility supporting title, description, priority, status, filtering, status changes, deletion, local persistence and JSON import or export.

  • Import
  • Export
  • Add New Task
  • Title
  • Description
  • Priority
  • Status
  • Add Task
  • Priority Filter
  • Status Filter
  • Delete

Preservation posture

Remove the unused dependency and use safe DOM APIs for task content.

  • Medium: The Lodash dependency URL returned HTTP 404.
  • High: Task values are dynamically rendered and should be escaped in a rebuild.

Provenance

Representative: task-tracker.html

WordPress media IDs: 565, 594, 619

  • Media 565 · 14291 bytes · sha256:5077e521da999c4fa58fa8ad92f03c3d898c08ee059b2d609e7a5e165438d0dd
  • Media 594 · 14291 bytes · sha256:5077e521da999c4fa58fa8ad92f03c3d898c08ee059b2d609e7a5e165438d0dd
  • Media 619 · 14291 bytes · sha256:5077e521da999c4fa58fa8ad92f03c3d898c08ee059b2d609e7a5e165438d0dd
  • kodyw.com:/wp-content/uploads/2025/03/task-tracker.html:178-256

RAPP Vision angle

16:9: Rebuilding an offline CRUD app and proving that its broken dependency was never needed.

9:16: The CDN died. The app survived.

Copilot Prototypes high risk

Teacher-Learner Conversation Replay

A replay laboratory for comparing a teacher prompt, its original answer and a newly generated answer step by step.

Needs hardening 1 archived filename
Evidence, safety, and related work

Observed behavior

Conversation replay comparator that imports or pastes JSON, shows teacher input beside original and regenerated responses, highlights differences, supports manual or automatic stepping, reset, export and configurable API settings.

  • Configure API
  • Theme
  • Upload Conversation
  • Export Conversation
  • Start
  • Next Step
  • Reset
  • Auto Replay
  • Paste JSON
  • Test Connection
  • Difference Highlighting
  • Section Titles

Preservation posture

Use a deterministic local mock by default, sanitize all content and never persist credentials.

  • High: The API key and endpoint are stored in localStorage.
  • High: Imported and API-generated formatted content is inserted into dynamic HTML.

Provenance

Representative: teacher-learner-app.html

WordPress media IDs: 566, 586, 620

  • Media 566 · 79739 bytes · sha256:4d25956b992802bf6eb1713d802d0e9c0d061b298b4bacec7da0cca8879626ba
  • Media 586 · 79739 bytes · sha256:4d25956b992802bf6eb1713d802d0e9c0d061b298b4bacec7da0cca8879626ba
  • Media 620 · 79739 bytes · sha256:4d25956b992802bf6eb1713d802d0e9c0d061b298b4bacec7da0cca8879626ba
  • kodyw.com:/wp-content/uploads/2025/03/teacher-learner-app.html:896-1023
  • kodyw.com:/wp-content/uploads/2025/03/teacher-learner-app.html:1088-1252
  • kodyw.com:/wp-content/uploads/2025/03/teacher-learner-app.html:1397-1439

RAPP Vision angle

16:9: Build a replay harness for comparing baseline and regenerated AI responses.

9:16: Original answer versus rebuilt answer. Spot the difference.

Copilot Prototypes high risk

Dynamic Teaching Simulation

A configurable teacher-and-student loop modeling knowledge transfer as alternating conversational turns.

Needs hardening 2 archived filenames
Evidence, safety, and related work

Observed behavior

Two-role teaching simulation with configurable teacher and student personas, topic, initial teaching task, iteration limit, optional learning verification, manual or automatic progression, export and theme controls.

  • Configure
  • Theme
  • Export Conversation
  • Start
  • Next Step
  • Reset
  • Auto
  • Teacher Name
  • Teacher Role
  • Topic
  • Initial Task
  • Student Name
  • Student Role
  • Maximum Iterations
  • Verify Learning

Preservation posture

Replace networked turns with deterministic local rules and remove all credential handling.

  • High: The function key is stored in localStorage.
  • Medium: The default backend is localhost and is not publicly available.

Provenance

Representative: teacher-learner.html

WordPress media IDs: 567, 591, 621

  • Media 567 · 69220 bytes · sha256:ac71881152aff1cf152baf59cd29275af65443cd92f4e421f81f1cd698c35590
  • Media 591 · 69220 bytes · sha256:ac71881152aff1cf152baf59cd29275af65443cd92f4e421f81f1cd698c35590
  • Media 621 · 69220 bytes · sha256:ac71881152aff1cf152baf59cd29275af65443cd92f4e421f81f1cd698c35590
  • kodyw.com:/wp-content/uploads/2025/03/teacher-learner.html:375-479
  • kodyw.com:/wp-content/uploads/2025/03/teacher-learner.html:1288-1396

RAPP Vision angle

16:9: Modeling a two-agent teaching loop as a predictable, testable state machine.

9:16: Can two fake agents teach each other without an AI model?

Local-First Utilities high risk

Advanced Terminal Log Visualizer

A dense terminal-output utility that reorganizes pasted logs into searchable incident views and service counts.

Restoration candidate 1 archived filename Clean-room lesson available
Open historical artifact ↗
Evidence, safety, and related work

Observed behavior

Offline terminal-log parser with HTTP, success, warning, error and service classifications, counts, search, grouped, timeline and raw views, timestamp hiding, expand or collapse, copy and truncated-log repair.

  • Paste Logs
  • Parse Logs
  • Clear
  • Copy All
  • Auto-Fix
  • Hide Timestamps
  • Search
  • Grouped
  • Timeline
  • Raw
  • Expand All
  • Collapse All
  • Theme

Preservation posture

Escape content before highlighting and use a sandboxed, dependency-pinned restoration.

  • High: Parsed log summaries and details are assigned through innerHTML.
  • High: Search highlighting adds markup without first escaping original log text.

Provenance

Representative: terminal-viewer.html

WordPress media IDs: 539, 568, 579, 622

  • Media 539 · 48856 bytes · sha256:a75cfe27ef65fed52e28bec18c8f4163ba6b8194eef9f278351439109ef1ceb1
  • Media 568 · 48856 bytes · sha256:a75cfe27ef65fed52e28bec18c8f4163ba6b8194eef9f278351439109ef1ceb1
  • Media 579 · 48856 bytes · sha256:a75cfe27ef65fed52e28bec18c8f4163ba6b8194eef9f278351439109ef1ceb1
  • Media 622 · 48856 bytes · sha256:a75cfe27ef65fed52e28bec18c8f4163ba6b8194eef9f278351439109ef1ceb1
  • kodyw.com:/wp-content/uploads/2025/03/terminal-viewer.html:697-828
  • kodyw.com:/wp-content/uploads/2025/03/terminal-viewer.html:1370-1543

RAPP Vision angle

16:9: Build a log visualizer and learn why syntax highlighting must begin with escaping.

9:16: A pasted log line should never become executable HTML.

Agent Workbenches high risk

Agent Workflow Executor

The collection's most ambitious single-file workflow IDE, combining graph editing, templates, execution history and replay.

Needs hardening 1 archived filename
Evidence, safety, and related work

Observed behavior

Large node-based workflow editor with draggable connected nodes, zoom and framing controls, prompt and parameter editing, templates, history, search, document input, sample data, import or export, settings, replay and simulated fallback execution.

  • Add Step
  • Import
  • Export
  • Execute
  • Zoom In
  • Zoom Out
  • Fit
  • Center
  • Filter
  • New Template
  • Test Connection
  • Export All Data
  • Import Data
  • Clear All Data
  • Load Sample Text
  • Edit Node
  • Replay Workflow

Preservation posture

Use schema validation, safe rendering, deterministic simulation and session-only credentials excluded from exports.

  • High: API keys are included in localStorage-backed application state and settings.
  • High: Imported workflow fields and execution results pass through numerous dynamic HTML assignments.
  • Medium: The default endpoint is localhost and not a public service.

Provenance

Representative: workflow-executor-app.html

WordPress media IDs: 569, 592, 623

  • Media 569 · 218662 bytes · sha256:a117eba267b4f4515bdb59b8cad4c82f62d7930ce73518a10e91fa90a97aee76
  • Media 592 · 218662 bytes · sha256:a117eba267b4f4515bdb59b8cad4c82f62d7930ce73518a10e91fa90a97aee76
  • Media 623 · 218662 bytes · sha256:a117eba267b4f4515bdb59b8cad4c82f62d7930ce73518a10e91fa90a97aee76
  • kodyw.com:/wp-content/uploads/2025/03/workflow-executor-app.html:1414-1470
  • kodyw.com:/wp-content/uploads/2025/03/workflow-executor-app.html:1852-2009
  • kodyw.com:/wp-content/uploads/2025/03/workflow-executor-app.html:2676-2730
  • kodyw.com:/wp-content/uploads/2025/03/workflow-executor-app.html:3689-3795

RAPP Vision angle

16:9: Building a miniature workflow IDE with graph editing, templates, execution history and replay.

9:16: This entire workflow IDE is one HTML file.

Media Laboratories high risk

YouTube Webcam Sync with Combined Export

A clever but technically blocked attempt to record a YouTube video and webcam together as a browser-generated split-screen file.

Context only 1 archived filename
Evidence, safety, and related work

Observed behavior

Media experiment accepting a YouTube URL, loading an iframe player, requesting webcam video, presenting a countdown, attempting split-screen Canvas composition, recording the Canvas stream with MediaRecorder and offering WebM download.

  • YouTube URL
  • Load Video
  • Start Recording
  • Stop Recording
  • Reset
  • Download Combined Video
  • Record Again

Preservation posture

Do not grant camera permission to the historical artifact. Redesign around user-owned local video, explicit consent and guaranteed media-track shutdown.

  • High: The code passes a YouTube iframe element to Canvas drawImage; iframe elements are not valid Canvas image sources.
  • High: Cross-origin YouTube pixels cannot normally be copied into a Canvas recording.
  • High: Camera capture and recording require explicit privacy consent.
  • Medium: Recording or redistributing third-party video may create rights and platform-policy concerns.

Provenance

Representative: youtube-webcam-sync-fixed.html

WordPress media IDs: 570, 587, 624

  • Media 570 · 20635 bytes · sha256:b50bec9590ef241805258d0b0572f2a3fe9b65be8bb52a48b2c5353a890d6dc0
  • Media 587 · 20635 bytes · sha256:b50bec9590ef241805258d0b0572f2a3fe9b65be8bb52a48b2c5353a890d6dc0
  • Media 624 · 20635 bytes · sha256:b50bec9590ef241805258d0b0572f2a3fe9b65be8bb52a48b2c5353a890d6dc0
  • kodyw.com:/wp-content/uploads/2025/03/youtube-webcam-sync-fixed.html:273-357
  • kodyw.com:/wp-content/uploads/2025/03/youtube-webcam-sync-fixed.html:397-550
  • kodyw.com:/wp-content/uploads/2025/03/youtube-webcam-sync-fixed.html:589-707

RAPP Vision angle

16:9: Why you cannot record a YouTube iframe into Canvas and how to build the technically valid version.

9:16: Why drawImage with a YouTube iframe does not work.

Method and provenance

The source audit used the public, unauthenticated WordPress REST API and passive HTTP retrieval only. Numbered filename variants were grouped, SHA-256 compared, and then curated into product families. All 96 audited media IDs are bound to their public source URL, byte length, and SHA-256; those hashes recompute to 27 content groups. The checked-in evidence snapshot has SHA-256 6e6daec82e55977985df613e45f23a076ec53a8c7775b64c533408784a238884.

The museum data, public API, and RAPP Vision brief feed are regenerated by scripts/build_lost_apps_museum.py; --check proves that the committed outputs still match the verified evidence.

Isolated clean-room preview

Clean-room restoration

This is original restoration code, not the historical upload. It runs in a restricted iframe without same-origin privileges or device permissions.