This page is served by a hardened, isolated container on the otl-demos droplet — read-only filesystem, no outbound network, dropped Linux capabilities, CPU/memory capped. It proves the pilot pattern: a real interactive app behind TLS, embeddable in an iframe on the site and a WKWebView in the iOS app.