sandbox isolation

Generated code is untrusted code. Not because a model is malicious, but because nobody read it before it ran, and because what a model writes is influenced by whatever text it was given — which can include text written by someone else.

Isolation comes in strengths, and the vocabulary is worth knowing because the industry uses it loosely. Logical isolation means one system enforces separation between tenants in software. Container isolation gives each workload its own filesystem and process namespace, sharing a kernel. Virtual machine or microVM isolation gives each workload its own kernel, which removes the largest class of escape.

The question to ask any AI app builder is not whether it says "secure" but three specifics: what is the boundary, does the preview run inside it, and is one project's boundary shared with anyone else's. Previews are where this quietly slips, because a preview feels like a rendering rather than an execution, and it is an execution.

sup3rapp runs every project in its own sandbox, previews included. Several competitors document strong isolation too — Replit and v0 both publish detail here, and it would be dishonest to claim this as a difference against them.