What It Is, Not What It Says: Securing Agentic Browsing Interactions with Web Semantics

Intact records webpage element provenance and capabilities, isolates planning per element, and uses a browser harness to constrain actions and request consent for third-party interactions.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research papers

Environment

web

Topics

safety-security, web-navigation, planning, human-in-the-loop

Record publication date

2026-10-15

Evidence retrieved

2026-10-20T13:38:46.444001Z

Resource ID

arxiv:2610.22697

Recorded paper version

arXiv v1

Version updated: 2026-10-15T22:02:45Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Umar Iqbal

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

Evaluation instructs the model to simulate compromise and measures planner outputs and permission appearance. Utility uses plan matching and LLM-judged element suitability; no steps are executed in that assessment. Assumes an honest first party, trusted browser/harness and untampered instrumentation; multi-page and availability attacks are outside scope. Parallel latency reduction is an unimplemented estimate. No independent reproduction.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-20T05:52:01Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   63e37cd26bfe69455a3fa835f3d6ba4cfcc5bb7dc91f90505920d37b1e08f0b6
2. editorial primary review

   Retrieved 2026-10-20T13:38:46.444001Z. Supports: name, kind, summary, environments, topics, scope, notes.

   Content fingerprint

   cb6a8a9c0cc47be21b36b3d1831b26c6189d8f2e4af0d7e26d643c9c2a65452f

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.