SPIDES: Information-Flow Control for Browser Agents

SPIDES propagates HTML integrity and confidentiality labels into agent context and mediates browser actions with information-flow policies and approval gates, evaluated in the labeled MicroNet ecosystem.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research papers

Environment

web

Topics

safety-security, web-navigation, human-in-the-loop, evaluation

Record publication date

2026-10-16

Evidence retrieved

2026-10-20T08:27:26.236797+00:00

Resource ID

arxiv:2610.24277

Recorded paper version

arXiv v1

Version updated: 2026-10-16T22:12:45Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Egor Zverev, Juhee Kim, Leon Trampert, Boris Köpf, Aashish Kolluri, Shruti Tople, Santiago Zanella-Béguelin

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

Reviewed the complete abstract and selected v1 threat-model, policy, evaluation and limitations sections. Guarantees assume correct labels/trusted origins and a trusted browser/harness mediating actions; evaluation uses idealized approvals. Origin-level reader sets can miss recipient distinctions within one origin. No unrestricted prompt-injection immunity or independent reproduction is claimed.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-20T05:52:00Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   af310824eea97aac8209023ff53bad7bea77778816586b10bb94110148347af9
2. editorial primary review

   Retrieved 2026-10-20T08:27:26.236797+00:00. Supports: name, kind, scope.

   Content fingerprint

   80bed80786f939973d0d13b4f892300fee02a6110e326247131fc83d257796de
3. editorial primary review

   Retrieved 2026-10-20T09:17:33.132448+00:00. Supports: summary, environments, topics, scope, notes.

   Content fingerprint

   daceefecb2e6b910a6c7f2ffe35e89c7070f6282f4f35ee89e885a2e77aa94c4

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.