Datasette Apps run sandboxed HTML and AI-generated code over a database

Category: Agentic coding
Status: confirmed
Sources: Simon Willison, discussion
Summary: Simon Willison published Datasette Apps on 2026-06-18: self-contained HTML and JavaScript applications that run in sandboxed iframes on a Datasette instance. They can execute read-only SQL directly and writes through pre-configured stored queries, and the sandbox blocks cookies, localStorage, and external exfiltration. The design explicitly targets accepting AI-generated code while keeping a hard security boundary.
Why it matters: It is a concrete pattern for letting an LLM produce runnable data apps without granting unrestricted database or network access.
Follow-up: Watch for adoption and whether the sandbox model holds up under review.