I've used CodePen for most of my AI demos and noticed recently that I get a unavailable result when checking availability, and if I try to create anyway, get:
NotAllowedError: Access denied because the Permission Policy is not enabled.
Exact same code works in a 'real' page on my system so my guess it's a setting CodePen is using for their site. I've run into this once or twice in the past... I think maybe once for Bluetooth testing... so the question is - is there a particular security policy that would be required on an iframe using AI that would create this issue?