Capability-based sandboxing in Wasm can lock down the external communication leg of @simonwillison.net's AI lethal trifecta.
Private data via APIs + user prompt (untrusted content) + no fetch capability.
This is what Microsoft is going for with Wassette
opensource.microsoft.com/blog/2025/08...
