LIVE BACKEND · NOT A FIXTURE
Run an agent. Contain the blast radius.
A real model operates a synthetic CRM inside a default-deny Cloudflare Sandbox, commits a material world change, and leaves independently evaluated evidence.
Workflow Sandbox Workers AI Simulated world
Binding checks—inspect below
AuthorityDO SQLitesingle writer per world
Protocolprobing…validated with Zod
SessionLockedapp identity required
Production checks