ceLLMate: Sandboxing Browser AI Agents

ceLLMate constrains browser-agent authority through an extension that applies policies at the HTTP layer. It evaluates this sandbox against prompt-injection attacks in WASP, avoiding dependence on brittle low-level click and keystroke policies.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research papers

Environment

web

Topics

safety-security, sandbox, web-navigation, robustness, evaluation

Record publication date

2025-12-14

Evidence retrieved

2026-10-17T12:31:09Z

Resource ID

arxiv:2512.12594

Recorded paper version

arXiv v2

Version updated: 2026-03-04T01:49:57Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Luoxi Meng, Henry Feng, Ilia Shumailov, Earlence Fernandes

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

Reviewed against the complete retained official abstract. Experimental findings and release availability have not been independently reproduced or verified.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-17T12:31:09Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   f8cee8b281f54ecb3112bb26b59d166617d33f08f098f44818968a9c9b777ce6
2. editorial primary review

   Retrieved 2026-10-17T12:31:09Z. Supports: name, kind, summary, environments, topics, scope.

   Content fingerprint

   f8cee8b281f54ecb3112bb26b59d166617d33f08f098f44818968a9c9b777ce6

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.