# ceLLMate: Sandboxing Browser AI Agents

ceLLMate constrains browser-agent authority through an extension that applies policies at the HTTP layer. It evaluates this sandbox against prompt-injection attacks in WASP, avoiding dependence on brittle low-level click and keystroke policies.

- Catalog URL: https://awesomecua.github.io/resources/arxiv-2512-12594/
- Original source: https://arxiv.org/abs/2512.12594
- Kind: paper
- Review: curated
- Scope: core
- Environments: web
- Topics: safety-security, sandbox, web-navigation, robustness, evaluation
- Evidence checked: 2026-10-17T12:31:09Z
- ID: arxiv:2512.12594

## Limitations

Reviewed against the complete retained official abstract. Experimental findings and release availability have not been independently reproduced or verified.

- Record JSON: https://awesomecua.github.io/resources/arxiv-2512-12594/record.json

## Authors

Luoxi Meng, Henry Feng, Ilia Shumailov, Earlence Fernandes

## Citation exports

- BibTeX: https://awesomecua.github.io/resources/arxiv-2512-12594/citation.bib
- CSL JSON: https://awesomecua.github.io/resources/arxiv-2512-12594/citation.csl.json

## Recorded arXiv snapshot

- Version: 2
- Version source: https://arxiv.org/abs/2512.12594v2
- First submission: 2025-12-14T08:25:31Z
- Version updated: 2026-03-04T01:49:57Z
- Abstract SHA-256: fa6b4d9fa34610ec6fa8c0ac8b075127365aad57a20d814a2e838a223cf8bd56
- Abstract hash normalization: sha256-utf8-whitespace-collapsed-v1

## License declarations

- code: not recorded
- data: not recorded
- document: not recorded
- weights: not recorded

## Primary evidence

- https://export.arxiv.org/api/query?id_list=2512.06866%2C2512.07287%2C2512.08769%2C2512.12594%2C2512.12730%2C2512.13159%2C2512.14012%2C2512.16925%2C2512.16962%2C2512.16975%2C2512.21373%2C2512.23647%2C2512.23738%2C2601.01743%2C2601.02046%2C2601.02163%2C2601.02454%2C2601.02702%2C2601.03468%2C2601.03928%2C2601.04795%2C2601.05107%2C2601.05432%2C2601.06411%2C2601.06487%2C2601.06490%2C2601.06565%2C2601.06663%2C2601.07143%2C2601.07375%2C2601.08012%2C2601.08079%2C2601.08225%2C2601.08237%2C2601.08731%2C2601.09113%2C2601.09749%2C2601.09883%2C2601.10378%2C2601.10440%2C2601.11653%2C2601.11895%2C2601.11903%2C2601.11974%2C2601.12042%2C2601.12307%2C2601.12560%2C2601.12641%2C2601.13186%2C2601.13383&max_results=50 (retrieved 2026-10-17T12:31:09Z; SHA-256 f8cee8b281f54ecb3112bb26b59d166617d33f08f098f44818968a9c9b777ce6)
- https://export.arxiv.org/api/query?id_list=2512.06866%2C2512.07287%2C2512.08769%2C2512.12594%2C2512.12730%2C2512.13159%2C2512.14012%2C2512.16925%2C2512.16962%2C2512.16975%2C2512.21373%2C2512.23647%2C2512.23738%2C2601.01743%2C2601.02046%2C2601.02163%2C2601.02454%2C2601.02702%2C2601.03468%2C2601.03928%2C2601.04795%2C2601.05107%2C2601.05432%2C2601.06411%2C2601.06487%2C2601.06490%2C2601.06565%2C2601.06663%2C2601.07143%2C2601.07375%2C2601.08012%2C2601.08079%2C2601.08225%2C2601.08237%2C2601.08731%2C2601.09113%2C2601.09749%2C2601.09883%2C2601.10378%2C2601.10440%2C2601.11653%2C2601.11895%2C2601.11903%2C2601.11974%2C2601.12042%2C2601.12307%2C2601.12560%2C2601.12641%2C2601.13186%2C2601.13383&max_results=50 (retrieved 2026-10-17T12:31:09Z; SHA-256 f8cee8b281f54ecb3112bb26b59d166617d33f08f098f44818968a9c9b777ce6)