Before Acting, Change the State: Prospective State Intervention for Web Agents under Deceptive Interfaces

arXiv:2609.34974 · cs.AI, cs.CR · Submitted 2026-09-28 · Read on arXiv

cs.AI, cs.CR

Submitted: 2026-09-28

Updated: 2026-09-28

Terminology

• Benchmark — 49× in this paper · explained in 2 episodes
• Ablation — 17× in this paper · explained in 1 episode
• Actor — 10× in this paper · explained in 3 episodes
• Verification — 8× in this paper · explained in 2 episodes
• Adaptation — 6× in this paper · explained in 1 episode
• Grounding — 5× in this paper · explained in 3 episodes
• World Model — 5× in this paper · explained in 7 episodes
• Core — 3× in this paper · explained in 2 episodes
• Robustness — 3× in this paper · explained in 5 episodes
• Generative AI — 2× in this paper · explained in 2 episodes
• Agentic Framework — 1× in this paper · explained in 6 episodes
• Benchmarking — 1× in this paper · explained in 3 episodes
• Consistency — 1× in this paper · explained in 3 episodes
• Large Language Model (LLM) — 1× in this paper · explained in 3 episodes
• Multi-Agent System — 1× in this paper · explained in 6 episodes
• Task Planning — 1× in this paper · explained in 2 episodes
• Verifier — 1× in this paper · explained in 2 episodes

Sources

• SafePred: A Predictive Guardrail for Computer-Using Agents via World Models
• Is Your LLM Secretly a World Model of the Internet? Model-Based Planning for Web Agents
• Defending Against Indirect Prompt Injection Attacks With Spotlighting
• Agent Workflow Memory
• SeerGuard: A Safety Framework for Mobile GUI Agents via World Model Prediction
• WebGuard: Building a Generalizable Guardrail for Web Agents
• Language Agent Tree Search Unifies Reasoning Acting and Planning in Language Models

Related papers

• MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
• Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
• The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
• MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
• Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems
• VSAL: A Vision Solver with Adaptive Layouts for Graph Property Detection