Web Agents Should Adopt the Plan-Then-Execute Paradigm

Argues for compiling web tasks into predefined execution graphs before exposing an agent to untrusted runtime content. Its WebArena task analysis identifies typed, semantically complete website tools as a prerequisite and distinguishes this interface proposal from reactive click-level control.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research papers

Environment

web

Topics

planning, safety-security, tool-integration

Record publication date

2026-05-14

Evidence retrieved

2026-10-16T06:36:39Z

Resource ID

arxiv:2605.14290

Recorded paper version

arXiv v1

Version updated: 2026-05-14T02:48:57Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Julien Piet, Annabella Chow, Yiwei Hou, Muxi Lyu, Sylvie Venuto, Jinhao Zhu, Raluca Ada Popa, David Wagner

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

The annotation and scope were reviewed against the complete retained original arXiv abstract. Experiments, reported performance and artifact availability have not been independently reproduced. Directly analyzes browser-agent prompt-injection boundaries and WebArena task structure, but advocates typed website operations rather than demonstrating a new GUI-control policy.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-16T06:36:39Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   27c33576ed43c7bc63d4b290f6558553bd1d3aa112a7358138f4045e1bc14918
2. editorial primary review

   Retrieved 2026-10-16T06:36:39Z. Supports: name, kind, summary, environments, topics, scope, notes.

   Content fingerprint

   27c33576ed43c7bc63d4b290f6558553bd1d3aa112a7358138f4045e1bc14918

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.