COMPUTER-USE AND BROWSER AGENTS

CONTAINMENT MEASURES Good containment layers several protections. Run the agent inside an isolated environment with nothing valuable in it. Give it an allow-list of sites and block everything else. Block categories of dangerous actions entirely, such as financial transactions or account settings changes. Require human approval for any action that sends, buys, deletes, or publishes. Log every action with screenshots for later review, with sensitive areas masked where possible, using the observability of Part Seven. Limit the number of steps and the spending, with the budgets of Chapter 25. Provide a kill switch, as discussed in Chapter 60. Test with adversarial pages, meaning pages deliberately built to trick the agent, as part of your evaluations in Part Eight.