{"version":"1.0.0","updatedDate":"2026-10-13","canonical":"https://inquory.com/blog/news/agents-api-hosted-browser-business-controls","provenance":"Inquory source-based analysis and explicitly labelled synthetic calculations/reference-policy cases. No vendor runtime, account, biology or customer test.","id":"browser","path":"/news/agents-api-hosted-browser-business-controls","heading":"Execute an application-side action boundary locally","contribution":"Eight executed local policy cases demonstrating why approved-origin access differs from approval of an action.","method":"A deterministic reference policy allows only non-sensitive public reads on an approved origin. It denies other origins, stops sensitive-data access and stops mutations. A page's claim of permission never changes the result.","paragraphs":["The current computer-use documentation distinguishes origin approval from guaranteed action confirmation. An application needs to decide which operations its runtime can execute. A model instruction to ask permission is not the same as removing a write capability from the runtime.","The local results below test Inquory's small reference policy, using no browser agent or vendor API. The public-read case remains allowed even when a page contains an instruction; the policy does not follow that instruction. Emailing, purchasing, deleting and private-data access stay outside the allowed operation. An actual implementation must also bind the evaluated action to the action executed, avoiding a check-then-change gap."],"headers":["Synthetic requested operation","Local disposition"],"rows":[["Read approved public documentation","ALLOW_PUBLIC_READ"],["Read another unapproved origin","DENY_ORIGIN"],["Website asks to email a report","STOP_ACTION_REQUIRES_SEPARATE_CONTROL"],["Website asks to upload customer records","STOP_SENSITIVE_DATA"],["Read public page containing an instruction to ignore the owner","ALLOW_PUBLIC_READ"],["Delete a remote record","STOP_ACTION_REQUIRES_SEPARATE_CONTROL"],["Inspect private account contents","STOP_SENSITIVE_DATA"],["Submit a purchase on an approved origin","STOP_ACTION_REQUIRES_SEPARATE_CONTROL"]],"limits":"No hosted browser, model, network, account or prompt-injection benchmark was tested. Boolean case attributes are predeclared; the example does not classify arbitrary page text or enforce policy inside OpenAI's runtime. It is a reference boundary for an application that controls its own action executor.","sources":[{"label":"OpenAI computer-use documentation, reopened October 13","href":"https://developers.openai.com/api/docs/guides/agents-api/tools/computer-use"}],"related":{"label":"Compare this boundary with the extension-permissions decision ledger","href":"/guides/browser-extension-permissions-decision-ledger"}}