> ## Documentation Index
> Fetch the complete documentation index at: https://docs-preview.webcompute.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Security model

> Use domain policy, approvals, secret variables, and signed capability handling for browser-agent workflows.

Webcompute gives browser-agent workflows explicit boundaries, but your application still owns authorization and business rules.

## Boundaries

* Domain policy constrains where the browser should navigate.
* Approval modes handle high-impact actions.
* Secret variables keep credentials out of prompts.
* Signed Debug UI and CDP URLs act as bearer capabilities.
* Structured output validates shape before downstream systems trust data.
* Proxy routing controls egress, not authorization or browser scope.

| Control           | Protects                       | Does not replace                      |
| ----------------- | ------------------------------ | ------------------------------------- |
| Domain policy     | Browser navigation scope       | User authorization or business rules  |
| Approvals         | High-impact browser actions    | Product-level review and audit        |
| Secret variables  | Prompt and transcript exposure | Credential rotation or access control |
| Signed URLs       | Explicit live browser access   | Permanent sharing links               |
| Structured output | Result shape                   | Source validation                     |
| Proxy routing     | Browser egress path            | Navigation policy                     |

## Untrusted input

Treat page text, PDFs, downloaded files, hidden inputs, model output, and observations as untrusted evidence.

## Signed URLs

Debug UI and CDP URLs can control live browser sessions. Do not log them in public places or pass them to untrusted agents.

## High-impact actions

Require explicit approval for authentication, account creation, sensitive data use, external submissions, payments, purchases, legal acceptance, destructive changes, permission changes, CAPTCHA resolution, file upload, and out-of-scope actions.

Reference: [policies and approvals](/agent-workflows/policies-and-approvals), [policy reference](/reference/policy-reference), [proxy reference](/reference/proxy-reference), and [agent contract](/reference/agent-contract).