--- title: Your next enterprise software feature won’t be shipped.... description: Enterprise applications are moving toward generating small, single-use programs on demand rather than relying solely on prebuilt reports or retrieval-augmented... canonical: https://daily.dev/posts/your-next-enterprise-software-feature-won-t-be-shipped-it-will-be-generated--nnsdn8myb twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Your next enterprise software feature won’t be shipped. It will be generated. | daily.dev og:description: Enterprise applications are moving toward generating small, single-use programs on demand rather than relying solely on prebuilt reports or retrieval-augmented... og:url: https://daily.dev/posts/your-next-enterprise-software-feature-won-t-be-shipped-it-will-be-generated--nnsdn8myb og:image: https://api.daily.dev/og/posts/NnsDN8Myb.png og:image:alt: Your next enterprise software feature won’t be shipped. It will be generated. og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Your next enterprise software feature won’t be shipped. It will be generated. **[The Next Web](https://daily.dev/sources/tnw)** · 7 min read · 1 upvotes · 0 comments ## Summary Enterprise applications are moving toward generating small, single-use programs on demand rather than relying solely on prebuilt reports or retrieval-augmented generation. An AI assistant translates a user's natural-language request into a temporary program that computes an answer-shaped result, executed either server-side in a sandbox or client-side in the browser under the user's delegated identity. The piece argues that client-side execution using constructs like new Function() combined with sandboxed iframes or workers, paired with capability-based access rather than broad credentials, can let generated code compute safely without escaping into the DOM, cookies, or network. It frames this as an evolution beyond RAG: retrieval selects existing evidence, while generated code computes new evidence for questions no dashboard or report anticipated. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How can generated JavaScript code be run safely in the browser without giving it full access to the DOM and cookies? Generated code should run inside an isolated worker or sandboxed iframe rather than with eval() in the main page. The new Function() constructor compiles a string into a function without capturing the calling scope's local variables, but it still needs a sandboxed iframe or worker to fully contain it. The application should expose only a small set of typed, auditable operations, treat reads as default, and require separate grants plus confirmation for writes. _daily.dev surfaces practical sandboxing patterns for teams securing AI-generated code execution._ ### Why is retrieval-augmented generation (RAG) not enough for many enterprise data questions? RAG only selects from evidence that already exists, such as a document, passage, or row, but many enterprise questions require a procedure, filtering, joining, calculating, and summarizing across sources, that no existing artifact answers directly. The alternative is generating a temporary program that computes new evidence on the fly, executes against approved capabilities, and returns only the computed result to the model's context window. _developers comparing RAG against generated-code approaches can track this shift on daily.dev._ ## Similar posts on daily.dev - [Before you build your first enterprise AI app](https://daily.dev/posts/before-you-build-your-first-enterprise-ai-app-68ssc7jhc) · InfoWorld · 1 upvotes · 0 comments - [Beyond Code Generation: How AI Is Reshaping Modern Software Delivery](https://daily.dev/posts/beyond-code-generation-how-ai-is-reshaping-modern-software-delivery-olilqg6hs) · SitePoint · 2 upvotes · 0 comments - [Beyond AI Coding Assistants: The Next Evolution of Software Development](https://daily.dev/posts/beyond-ai-coding-assistants-the-next-evolution-of-software-development-qln3cqkqx) · SD Times · 5 upvotes · 0 comments --- Tags: [#ai-agents](https://daily.dev/tags/ai-agents) [View this post on daily.dev](https://daily.dev/posts/your-next-enterprise-software-feature-won-t-be-shipped-it-will-be-generated--nnsdn8myb) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Your next enterprise software feature won’t be shipped. It will be generated.","url":"https://daily.dev/posts/your-next-enterprise-software-feature-won-t-be-shipped-it-will-be-generated--nnsdn8myb","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/your-next-enterprise-software-feature-won-t-be-shipped-it-will-be-generated--nnsdn8myb"},"datePublished":"2026-09-01T11:10:23.081Z","dateModified":"2026-09-01T11:10:49.829Z","description":"Enterprise applications are moving toward generating small, single-use programs on demand rather than relying solely on prebuilt reports or retrieval-augmented...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3635aa8b4c44b292c4182cea7667680b?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3635aa8b4c44b292c4182cea7667680b?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Next Web","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Next Web","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/tnw","url":"https://daily.dev/sources/tnw"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/your-next-enterprise-software-feature-won-t-be-shipped-it-will-be-generated--nnsdn8myb","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai-agents","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Next Web","item":"https://daily.dev/sources/tnw"},{"@type":"ListItem","position":3,"name":"Your next enterprise software feature won’t be shipped. It will be generated."}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/your-next-enterprise-software-feature-won-t-be-shipped-it-will-be-generated--nnsdn8myb#faq","mainEntity":[{"@type":"Question","name":"How can generated JavaScript code be run safely in the browser without giving it full access to the DOM and cookies?","acceptedAnswer":{"@type":"Answer","text":"Generated code should run inside an isolated worker or sandboxed iframe rather than with eval() in the main page. The new Function() constructor compiles a string into a function without capturing the calling scope's local variables, but it still needs a sandboxed iframe or worker to fully contain it. The application should expose only a small set of typed, auditable operations, treat reads as default, and require separate grants plus confirmation for writes. daily.dev surfaces practical sandboxing patterns for teams securing AI-generated code execution."}},{"@type":"Question","name":"Why is retrieval-augmented generation (RAG) not enough for many enterprise data questions?","acceptedAnswer":{"@type":"Answer","text":"RAG only selects from evidence that already exists, such as a document, passage, or row, but many enterprise questions require a procedure, filtering, joining, calculating, and summarizing across sources, that no existing artifact answers directly. The alternative is generating a temporary program that computes new evidence on the fly, executes against approved capabilities, and returns only the computed result to the model's context window. developers comparing RAG against generated-code approaches can track this shift on daily.dev."}}]} ```