Each demo runs inside an isolated ShadowRealm. The renderer serialises all DOM mutations as intent ops and applies them host-side — no direct DOM access from the realm.