capability C6Project 3Already Covered (D9)
Computer-use automation & human takeover
Foundation days
5- 57Threat-model a browser/computer-use agentW10M9D9R33 R41
- 58Disposable Browser Profile IsolationW10S2M9D9R04 R10 R33
- 59Restrict downloads and file writes to a temporary workspaceW10S0M9D9R10 R33
- 60Restrict network egress and command execution outside the modelW10M4M9D9R10 R25
- 61Pixel Auditor, Approval & TakeoverW11M7M9D9R10 R17 R33 R41
Hardening & validation days
9- 85Agent State Machine & Sandboxed Code DiagnosisW15S3M5D2D3R02 R21 R24 R41
- 86Review OAuth2/delegated scopesW15S6D7R22 R23
- 87Review memory/checkpoint provenanceW15S11M6D10D11R24 R41
- 88Browser Sandbox & Pixel Auditor AuditW15M9M10D2D3D7D8D9D11R21 R22 R25 R27 R33 R41
- 89Create a unified attack taxonomy across projectsW15S1S8D1D2D3D4D5D6D7D8D9D10D11D12R05 R39 R41
- 90Run direct, indirect, multi-turn, encoded, split-payload, and…W15S2S8D1D8R04 R05 R28
- 91Authorization & Isolation Red TeamingW16S0S4M1D2D3D4D5D7D10D11D12R02 R03 R05 R11 R13 R21 R24 R37
- 92Run availability and economic abuseW16S9M5D1D8R03 R04
- 93Prioritize findings by impact and exploitabilityW16S8S11D8D11D12R31 R42
Every day that names C6
8- 57Threat-model a browser/computer-use agentW10M9D9R33 R41
- 58Disposable Browser Profile IsolationW10S2M9D9R04 R10 R33
- 59Restrict downloads and file writes to a temporary workspaceW10S0M9D9R10 R33
- 60Restrict network egress and command execution outside the modelW10M4M9D9R10 R25
- 61Pixel Auditor, Approval & TakeoverW11M7M9D9R10 R17 R33 R41
- 88Browser Sandbox & Pixel Auditor AuditW15M9M10D2D3D7D8D9D11R21 R22 R25 R27 R33 R41
- 97Simulate agent runaway or unsafe browser actionW17S3M9D2D7D9D11R33 R41
- 107Revisit browser/computer-use securityW18M9D9R33 R41