... give you text back, maybe a code block. We wanted Kopai's agents to answer the way a good analyst would with the actual chart, table, or calculator, not a paragraph describing one. So when an agent decides a visualbeats prose, it writes real render-able code and it renders live in the chat inline, not a separate canvas. It runs in a sandboxed iframe with a null origin, so the generated code can't touch your cookies ... ... reading anything tied to your identity on the page. Outbound calls are a separate control: the iframe can hit the network, but only against a fixed allowlist, mostly CDN hosts for the chart/rendering packages it needs to build the