**Architecture**: Artifacts run inside an `<iframe>` on `claudeusercontent.com` (separate origin from claude.ai). Communication via `window.postMessage()`.