Browser Agent Safety: Gate in Environment, Not Agent

A developer argues AI agents should not judge their own risk; instead, the environment should enforce limits. They filter sensitive fields like passwords from the model's view and require approval for structurally sensitive controls. This approach prevents agents from misjudging the reach of actions like sending mass emails or irreversible migrations.