A prime finder runs in the sandbox. Every two seconds the whole sandbox — kernel memory, the guest's memory and its unwound call stack — is sealed into IndexedDB. Close the tab, come back, and it picks up from the syscall it was sealed at, no image staged, no program restarted.