# What It Is, Not What It Says: Securing Agentic Browsing Interactions with Web Semantics

Intact records webpage element provenance and capabilities, isolates planning per element, and uses a browser harness to constrain actions and request consent for third-party interactions.

- Catalog URL: https://awesomecua.github.io/resources/arxiv-2610-22697/
- Original source: https://arxiv.org/abs/2610.22697
- Kind: paper
- Review: curated
- Scope: core
- Environments: web
- Topics: safety-security, web-navigation, planning, human-in-the-loop
- Evidence checked: 2026-10-20T13:38:46.444001Z
- ID: arxiv:2610.22697

## Limitations

Evaluation instructs the model to simulate compromise and measures planner outputs and permission appearance. Utility uses plan matching and LLM-judged element suitability; no steps are executed in that assessment. Assumes an honest first party, trusted browser/harness and untampered instrumentation; multi-page and availability attacks are outside scope. Parallel latency reduction is an unimplemented estimate. No independent reproduction.

- Record JSON: https://awesomecua.github.io/resources/arxiv-2610-22697/record.json

## Authors

Umar Iqbal

## Citation exports

- BibTeX: https://awesomecua.github.io/resources/arxiv-2610-22697/citation.bib
- CSL JSON: https://awesomecua.github.io/resources/arxiv-2610-22697/citation.csl.json

## Recorded arXiv snapshot

- Version: 1
- Version source: https://arxiv.org/abs/2610.22697v1
- First submission: 2026-10-15T22:02:45Z
- Version updated: 2026-10-15T22:02:45Z
- Abstract SHA-256: 077dd623c980813e83197a38b6545161a3d2fc842d99fe291c53372b9770acd2
- Abstract hash normalization: sha256-utf8-whitespace-collapsed-v1

## License declarations

- code: not recorded
- data: not recorded
- document: not recorded
- weights: not recorded

## Primary evidence

- https://export.arxiv.org/api/query?id_list=2610.19384%2C2610.22672%2C2610.22697%2C2610.23303%2C2610.23307%2C2610.24729&max_results=6 (retrieved 2026-10-20T05:52:01Z; SHA-256 63e37cd26bfe69455a3fa835f3d6ba4cfcc5bb7dc91f90505920d37b1e08f0b6)
- https://arxiv.org/html/2610.22697v1 (retrieved 2026-10-20T13:38:46.444001Z; SHA-256 cb6a8a9c0cc47be21b36b3d1831b26c6189d8f2e4af0d7e26d643c9c2a65452f)