Write React code and run it in an isolated iframe. CSP-enforced — no network access, no host DOM access. Full React with hooks and interactivity.