# Runnable (Sandboxed)

Run JavaScript inside a sandboxed iframe (no same-origin access). It communicates with the host only through the validated postMessage bridge - `ctx.emit(event, detail)`.