Each image was built with container2wasm, which packs the container and the machine that runs it into one WebAssembly module. Click the console first — keystrokes go to the guest. The container reaches the network through a proxy that also runs in this tab, so it can only get what the browser would let this page get. Whatever you run is kept in the browser, and starts the next time with no network.