Three security boundaries for hosting untrusted, AI-generated HTML: identity, origin, and capability, each enforced by a different mechanism.