{
  "aliases": [],
  "authors": [
    "Ben Hagag",
    "William L. Anderson",
    "Srija Chakraborty",
    "Christian Schroeder de Witt"
  ],
  "details": {
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "3c380079220050fbe354509238a5a79c7df2917a245490e4ec0cff512f7565ab",
      "submitted_at": "2026-09-27T02:20:08Z",
      "updated_at": "2026-09-27T02:20:08Z",
      "version": 1,
      "versioned_url": "https://arxiv.org/abs/2609.33102v1"
    }
  },
  "environments": [
    "web",
    "desktop"
  ],
  "evidence": [
    {
      "method": "arxiv_api",
      "retrieved_at": "2026-10-20T12:58:20.217517Z",
      "role": "primary",
      "sha256": "f275c47a8b6d349a70e39a9e55eea5a09d99d5f35cc896100f3bcfd5b0923e0b",
      "supports": [
        "name",
        "authors",
        "published_at",
        "updated_at",
        "identifiers.arxiv",
        "details.arxiv_snapshot"
      ],
      "url": "https://export.arxiv.org/api/query?search_query=%28abs%3A%22computer-use+agents%22+OR+abs%3A%22GUI+agents%22+OR+abs%3A%22browser+agents%22+OR+abs%3A%22mobile+GUI%22%29+AND+submittedDate%3A%5B202609200000+TO+202610201255%5D&start=0&max_results=200&sortBy=submittedDate&sortOrder=descending"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-10-20T13:12:28.833839+00:00",
      "role": "primary",
      "sha256": "3ea667f4187ba601011e5ff00c4d63676b6d9903d12b80a0d7d5dd9920f00c65",
      "supports": [
        "name",
        "kind",
        "summary",
        "environments",
        "topics",
        "scope",
        "notes"
      ],
      "url": "https://arxiv.org/html/2609.33102v1"
    }
  ],
  "id": "arxiv:2609.33102",
  "identifiers": {
    "arxiv": "2609.33102"
  },
  "kind": "paper",
  "last_verified_at": "2026-10-20T13:12:28.833839+00:00",
  "licenses": {
    "code": null,
    "data": null,
    "document": null,
    "weights": null
  },
  "links": [
    {
      "rel": "primary",
      "url": "https://arxiv.org/abs/2609.33102"
    }
  ],
  "name": "ORBIT: A Framework for Multi-Agent Safety and Security Evaluations",
  "notes": "BrowserART uses an accessibility-tree action interface, while the desktop adapter uses mouse, keyboard and screenshots. The adapted tasks are not claimed to preserve the constructs of their source benchmarks. Experiments cover a representative configuration slice with fixed attack templates; the OS-Harm results are imported from prior work using a different model and stack. Browser defense tables also differ in baseline versus defended judges and in judged benign denominators. Human judge validation used one grader. These results do not establish a universally effective defense. The linked repository and its code/data licenses were not independently inspected, and no experiment was run.",
  "published_at": "2026-09-27",
  "relations": [],
  "review_status": "curated",
  "scope": "core",
  "summary": "Inspect-based framework that varies multi-agent roles, communication, attacks and defenses, with BrowserGym and virtual-desktop GUI adapters alongside coding and other tool scenarios.",
  "topics": [
    "evaluation",
    "safety-security",
    "web-navigation"
  ],
  "updated_at": "2026-09-27",
  "url": "https://arxiv.org/abs/2609.33102"
}