Settings & Safety
Execution Environment
ForkLab routes all generated code through validated file writes and BrowserPod sandboxes. Provider keys stay server-side; BrowserPod proof stays visible in the product UI.
The current build supports Gemini, Groq, Auto, and deterministic fallback modes. LLM output is treated as untrusted until BrowserPod writes files, runs the allowed command, and returns proof.
Execution settings
NEXT_PUBLIC_BROWSERPOD_API_KEY in .env.local for client-side BrowserPod boot.
GEMINI_API_KEY and GEMINI_MODEL are read only by server routes.
GROQ_API_KEY and GROQ_MODEL are read only by server routes.
Runs the first generated variant in BrowserPod and keeps the others generated but queued.
Attempts one BrowserPod run per selected variant and reports each result independently.
Required for SharedArrayBuffer and BrowserPod cross-origin isolation.
cross-origin-isolated=(self) must remain applied to app routes.
ForkLab chooses commands. LLM output cannot request shell execution.