Elastik - treating LLM as an untrusted HTTP client (~200 lines)

[rangersui]

Built a minimal protocol for human-AI interaction. One MCP tool: http(method, path, body), transparent passthrough to a local server.

AI writes strings. Server stores them. Browser renders them in a sandboxed iframe. Server never inspects content.

Security: instead of semantic guardrails, physical isolation.
iframe sandbox (frontend) + Docker (backend) + git merge (evolution). Same principle as never trusting a browser just applied to LLM.

Read your CORS blog post, similar direction but I went with physical isolation over origin validation.

github.com/rangersui/Elastik