Monitoring Web Agents Without Internal Signals: Observable Trajectories and Key-Step Supervision

This work does prefix-level risk prediction for web agents using only observable trajectory signals with no access to token logits, combining macro cross-step features with micro intention/action/state-change consistency features, labeled by the first uncorrected critical error.

• CURA: Certified Runtime Alarms for Computer-Use Agents
  August 28, 2026 · arXiv
• SafePred: A Predictive Guardrail for Computer-Using Agents via World Models
  February 2, 2026 · arXiv
• VRL-Bench: Benchmarking agents on computer control tasks under finite trial budgets
  September 11, 2026 · arXiv
• Discriminative World Models for Web Agents
  September 2, 2026 · arXiv
• Beyond the Verdict: Evidence-Aligned Evaluation of Visual Prompt-Injection Guardrails
  September 2, 2026 · arXiv
• When and What to Teach: Budget-Aware Online Adaptation for Web Agents
  August 31, 2026 · arXiv
• SCAFFOLD: Self-Improving Web Agents via Recursive Parametric Skill Abstraction
  August 31, 2026 · arXiv
• Learning Simple Test-Time Environments for LLM Web Agents
  August 29, 2026 · arXiv
• WebMCP-Phalanx: Enforcing and Characterizing Trust Boundaries for Browser-Integrated LLM Agents
  August 25, 2026 · arXiv
• BrowserForge: Scaling Web Episode via Parallel Browser Sandboxes
  August 25, 2026 · arXiv
• Training Needs Trustworthy Worlds: Verified Synthetic Web Environments for Agent Learning
  August 22, 2026 · arXiv
• Lexical Coupling in GUI Element Grounding: Sentence Embeddings Track Labels across Mobile and Web
  August 22, 2026 · arXiv
• ComponentBench: Diagnosing Component-Level Failures in Computer-Use Agents
  August 18, 2026 · COLM 2026
• StepJack: Benchmarking Computer-Use Agent Safety Against Multi-Step Indirect Prompt Injection
  August 6, 2026 · arXiv
• Routing Is Least Learnable Where It Is Most Valuable: Bounds on Representation Routing for Web Agents
  August 6, 2026 · arXiv
• LoginTrap: Uncovering Task-Agnostic Phishing-Style Indirect Prompt Injection Attacks against LLM-based Web Agents
  August 5, 2026 · arXiv
• Qwen-CUA: Native Computer Use for (almost) Everything
  August 3, 2026 · arXiv
• MAGA: Multi-Platform Self-Fusion of GUI Agents via Structured Action Distillation
  July 31, 2026 · arXiv
• Qwen-UI-Agent Technical Report: Toward Next-Generation Real-World Centric Foundation GUI Agents
  July 30, 2026 · arXiv
• OSReward: Instituting Standardized Evaluation for Cross-Platform Computer-Use Reward Models
  July 30, 2026 · arXiv
• EvoGUI: An Evolution-Aware Benchmark for GUI State-Transition Understanding
  July 19, 2026 · arXiv
• StructAgent: Harness Long-horizon Digital Agents with Unified Causal Structure
  July 13, 2026 · arXiv
• SCALECUA: Scaling Computer Use Agents with Verifiable Task Synthesis and Efficient Online RL
  July 13, 2026 · arXiv
• WebRetriever: A Large-Scale Comprehensive Benchmark for Efficient Web Agent Evaluation
  July 7, 2026 · arXiv