CaMeLs Can Use Computers Too: System-level Security for Computer Use Agents

NOVA separates trusted task planning from screen-derived observations by producing a branching plan before execution and resolving runtime values through perception. Its OSWorld study examines security and utility while identifying remaining risks from perception-driven branch steering.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research papers

Environment

desktop

Topics

safety-security, planning, robustness

Record publication date

2026-01-14

Evidence retrieved

2026-10-16T06:36:43Z

Resource ID

arxiv:2601.09923

Recorded paper version

arXiv v3

Version updated: 2026-06-04T15:38:02Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Hanna Foerster, Tom Blanchard, Kristina Nikolić, Ilia Shumailov, Cheng Zhang, Robert Mullins, Nicolas Papernot, Florian Tramèr, Yiren Zhao

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

The annotation was reviewed against the complete retained official abstract. Experimental findings and released artifacts have not been independently reproduced.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-16T06:36:43Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   c432f419481a105a8ce71174ec4aea23c4f0d36ddf89cfe1d0974fa349f6cb59
2. editorial primary review

   Retrieved 2026-10-16T06:36:43Z. Supports: name, kind, summary, environments, topics, scope.

   Content fingerprint

   c432f419481a105a8ce71174ec4aea23c4f0d36ddf89cfe1d0974fa349f6cb59

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.