A language for AI agents where a hijacked model cannot act. The real interpreter runs in your browser: play the attacker.

Loading the playground

Starting

Output

The program has not run yet.

Nothing yet.

Journal: every effect the run recorded