# SPIDES: Information-Flow Control for Browser Agents

SPIDES propagates HTML integrity and confidentiality labels into agent context and mediates browser actions with information-flow policies and approval gates, evaluated in the labeled MicroNet ecosystem.

- Catalog URL: https://awesomecua.github.io/resources/arxiv-2610-24277/
- Original source: https://arxiv.org/abs/2610.24277
- Kind: paper
- Review: curated
- Scope: core
- Environments: web
- Topics: safety-security, web-navigation, human-in-the-loop, evaluation
- Evidence checked: 2026-10-20T08:27:26.236797+00:00
- ID: arxiv:2610.24277

## Limitations

Reviewed the complete abstract and selected v1 threat-model, policy, evaluation and limitations sections. Guarantees assume correct labels/trusted origins and a trusted browser/harness mediating actions; evaluation uses idealized approvals. Origin-level reader sets can miss recipient distinctions within one origin. No unrestricted prompt-injection immunity or independent reproduction is claimed.

- Record JSON: https://awesomecua.github.io/resources/arxiv-2610-24277/record.json

## Authors

Egor Zverev, Juhee Kim, Leon Trampert, Boris Köpf, Aashish Kolluri, Shruti Tople, Santiago Zanella-Béguelin

## Citation exports

- BibTeX: https://awesomecua.github.io/resources/arxiv-2610-24277/citation.bib
- CSL JSON: https://awesomecua.github.io/resources/arxiv-2610-24277/citation.csl.json

## Recorded arXiv snapshot

- Version: 1
- Version source: https://arxiv.org/abs/2610.24277v1
- First submission: 2026-10-16T22:12:45Z
- Version updated: 2026-10-16T22:12:45Z
- Abstract SHA-256: e675a3082f571da547fb5b6cb89e4f68a034bfa57236886e1218cb2bb2cdf1c3
- Abstract hash normalization: sha256-utf8-whitespace-collapsed-v1

## License declarations

- code: not recorded
- data: not recorded
- document: not recorded
- weights: not recorded

## Primary evidence

- https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agent%22+OR+ti%3A%22browser+agent%22%29+AND+submittedDate%3A%5B202610060000+TO+202610200000%5D&start=0&max_results=200&sortBy=submittedDate&sortOrder=descending (retrieved 2026-10-20T05:52:00Z; SHA-256 af310824eea97aac8209023ff53bad7bea77778816586b10bb94110148347af9)
- https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agent%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22+OR+ti%3A%22browser+agents%22+OR+ti%3A%22mobile+agent%22+OR+ti%3A%22mobile+agents%22+OR+ti%3A%22desktop+agent%22%29+AND+submittedDate%3A%5B202610130000+TO+202610192359%5D&start=0&max_results=200&sortBy=submittedDate&sortOrder=descending (retrieved 2026-10-20T08:27:26.236797+00:00; SHA-256 80bed80786f939973d0d13b4f892300fee02a6110e326247131fc83d257796de)
- https://arxiv.org/html/2610.24277v1 (retrieved 2026-10-20T09:17:33.132448+00:00; SHA-256 daceefecb2e6b910a6c7f2ffe35e89c7070f6282f4f35ee89e885a2e77aa94c4)