wasm-jit — software with no fixed screen
Describe what you want and the interface appears in milliseconds — compiled to a capability-fenced WebAssembly cell that can only touch what you explicitly allow. Safe by construction, not by review. That is the whole bet.
The one-minute proof (live in the playground above, with JavaScript on): a generated seed that calls fetch() is refused at compile time — “unknown function 'fetch' — granted capabilities: [sin, cos, hue, rgb, hsl, disc, ring, arc, line, glow]”. The import table is the module’s entire world; a capability never granted cannot be seized, however clever the generator.

Open source (MIT): github.com/jrjohn/wasm-jit. This page renders itself from a description via WASM cells — enable JavaScript to see the compiler run in your browser and edit the seed yourself.