the browser is the sandbox | AI Focus

January 27, 2026

Browser window of Co-do app showing file manager interface with various markdown files listed on the left and a summary hi...

This got me thinking about the browser. Over the last 30 years, we have built a sandbox specifically designed to run incredibly hostile, untrusted code from anywhere on the web, the instant a user taps a URL. I think it’s incredible that we have this way to run code that you’ve no clue what it will do when you see a little blue link or a piece of text that looks like https://paul.kinlan.me/ – I mean, who would trust that guy?

Could you build something like Cowork in the browser? Maybe. To find out, I built a demo called Co-do that tests this hypothesis. In this post I want to discuss the research I’ve done to see how far we can get, and determine if the browser’s ability to run untrusted code is useful (and good enough) for enabling software to do more for us directly on our computer.

Source

Paul Kinlan here looks at the features of the web platform, such as file system access and network security features, and asks if the browser could be the sandbox that we need for systems like Claude Code and co-work.