{
  "aliases": [],
  "authors": [
    "Umar Iqbal"
  ],
  "details": {
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "077dd623c980813e83197a38b6545161a3d2fc842d99fe291c53372b9770acd2",
      "submitted_at": "2026-10-15T22:02:45Z",
      "updated_at": "2026-10-15T22:02:45Z",
      "version": 1,
      "versioned_url": "https://arxiv.org/abs/2610.22697v1"
    }
  },
  "environments": [
    "web"
  ],
  "evidence": [
    {
      "method": "arxiv_api",
      "retrieved_at": "2026-10-20T05:52:01Z",
      "role": "primary",
      "sha256": "63e37cd26bfe69455a3fa835f3d6ba4cfcc5bb7dc91f90505920d37b1e08f0b6",
      "supports": [
        "name",
        "authors",
        "published_at",
        "updated_at",
        "identifiers.arxiv",
        "details.arxiv_snapshot"
      ],
      "url": "https://export.arxiv.org/api/query?id_list=2610.19384%2C2610.22672%2C2610.22697%2C2610.23303%2C2610.23307%2C2610.24729&max_results=6"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-10-20T13:38:46.444001Z",
      "role": "primary",
      "sha256": "cb6a8a9c0cc47be21b36b3d1831b26c6189d8f2e4af0d7e26d643c9c2a65452f",
      "supports": [
        "name",
        "kind",
        "summary",
        "environments",
        "topics",
        "scope",
        "notes"
      ],
      "url": "https://arxiv.org/html/2610.22697v1"
    }
  ],
  "id": "arxiv:2610.22697",
  "identifiers": {
    "arxiv": "2610.22697"
  },
  "kind": "paper",
  "last_verified_at": "2026-10-20T13:38:46.444001Z",
  "licenses": {
    "code": null,
    "data": null,
    "document": null,
    "weights": null
  },
  "links": [
    {
      "rel": "primary",
      "url": "https://arxiv.org/abs/2610.22697"
    }
  ],
  "name": "What It Is, Not What It Says: Securing Agentic Browsing Interactions with Web Semantics",
  "notes": "Evaluation instructs the model to simulate compromise and measures planner outputs and permission appearance. Utility uses plan matching and LLM-judged element suitability; no steps are executed in that assessment. Assumes an honest first party, trusted browser/harness and untampered instrumentation; multi-page and availability attacks are outside scope. Parallel latency reduction is an unimplemented estimate. No independent reproduction.",
  "published_at": "2026-10-15",
  "relations": [],
  "review_status": "curated",
  "scope": "core",
  "summary": "Intact records webpage element provenance and capabilities, isolates planning per element, and uses a browser harness to constrain actions and request consent for third-party interactions.",
  "topics": [
    "safety-security",
    "web-navigation",
    "planning",
    "human-in-the-loop"
  ],
  "updated_at": "2026-10-15",
  "url": "https://arxiv.org/abs/2610.22697"
}