booting real CPython (Pyodide / WebAssembly) inside a sandboxed, opaque-origin iframe — no server…
—
This is the browser corner of the twin's runtime swap: an entire agent runtime (Pyodide) loaded into the same verify-before-act sandbox as /api. RAR agents run with verify-before-exec (source SHA-256 vs RAR's _sha256). Zero install — the browser is the Python.