A real Codex runtime in the browser — with explicit control over what it’s allowed to do. XCodex runs the actual Codex core in WASM and executes locally with browser-native capabilities like DOM inspection, storage access, and network requests. The runtime is designed to be embedded — consumers define what the agent is allowed to do via capability controls, origin policies, and approval flows for high-trust actions. No backend. Execution happens entirely in your browser.