Let AI act on the web without giving it the browser.
Runs explicit browser actions inside an isolated Electron session with host scope, denied popups and permissions, and fresh approval for active control.
The AI never receives direct operating-system privileges. Tool calls are resolved against the exact Idovio binding and pass through permissions and sandboxing.
Real browser execution with a deliberately narrow privilege surface.
