deliverable D9Project 3
Computer-Use Pixel Auditor
Shared consumers: None
What it is
Computer-Use Pixel Auditor (primary). Before high-impact UI actions, capture a fresh screenshot, inspect OCR/visual targets and overlays, compare coordinates with DOM/accessibility metadata where available, and verify that the intended target still matches. Flag suspicious overlays, spoofed controls, stale screenshots, and coordinate drift. Require approval for sensitive actions and record what was observed. This is a detection/verification layer, not a guarantee that every hidden or deceptive element is detected.
Build & integration days
5- 57Threat-model a browser/computer-use agentW10M9D9R33 R41
- 58Disposable Browser Profile IsolationW10S2M9D9R04 R10 R33
- 59Restrict downloads and file writes to a temporary workspaceW10S0M9D9R10 R33
- 60Restrict network egress and command execution outside the modelW10M4M9D9R10 R25
- 61Pixel Auditor, Approval & TakeoverW11M7M9D9R10 R17 R33 R41
Hardening & final verification days
7- 88Browser Sandbox & Pixel Auditor AuditW15M9M10D2D3D7D8D9D11R21 R22 R25 R27 R33 R41
- 89Create a unified attack taxonomy across projectsW15S1S8D1D2D3D4D5D6D7D8D9D10D11D12R05 R39 R41
- 97Simulate agent runaway or unsafe browser actionW17S3M9D2D7D9D11R33 R41
- 107Revisit browser/computer-use securityW18M9D9R33 R41
- 109Run the complete Project 3 agentW19D2D3D7D8D9D11D12R21 R22 R24 R33
- 110Prepare one architecture and threat-model package per projectW19D1D2D3D4D5D6D7D8D9D10D11D12R02 R31 R39
- 111Consolidated Security PortfolioW19S10S12D1D2D3D4D5D6D7D8D9D10D11D12R28 R31 R34 R35 R42
Every day that names D9
12- 57Threat-model a browser/computer-use agentW10M9D9R33 R41
- 58Disposable Browser Profile IsolationW10S2M9D9R04 R10 R33
- 59Restrict downloads and file writes to a temporary workspaceW10S0M9D9R10 R33
- 60Restrict network egress and command execution outside the modelW10M4M9D9R10 R25
- 61Pixel Auditor, Approval & TakeoverW11M7M9D9R10 R17 R33 R41
- 88Browser Sandbox & Pixel Auditor AuditW15M9M10D2D3D7D8D9D11R21 R22 R25 R27 R33 R41
- 89Create a unified attack taxonomy across projectsW15S1S8D1D2D3D4D5D6D7D8D9D10D11D12R05 R39 R41
- 97Simulate agent runaway or unsafe browser actionW17S3M9D2D7D9D11R33 R41
- 107Revisit browser/computer-use securityW18M9D9R33 R41
- 109Run the complete Project 3 agentW19D2D3D7D8D9D11D12R21 R22 R24 R33
- 110Prepare one architecture and threat-model package per projectW19D1D2D3D4D5D6D7D8D9D10D11D12R02 R31 R39
- 111Consolidated Security PortfolioW19S10S12D1D2D3D4D5D6D7D8D9D10D11D12R28 R31 R34 R35 R42