# Securing Web Agents with the Compile-Then-Execute Paradigm

Baya compiles a web task into a program using a Trusted Website API before viewing live content, limiting how webpage prompt injections can alter agent control flow.

- Catalog URL: https://awesomecua.com/resources/arxiv-2611-06039/
- Original source: https://arxiv.org/abs/2611.06039
- Kind: paper
- Review: curated
- Scope: core
- Environments: web
- Topics: safety-security, web-navigation, planning, tool-integration
- Evidence checked: 2026-11-05T23:03:30Z
- ID: arxiv:2611.06039

## Limitations

The annotation and scope were reviewed against the complete retained arXiv abstract (v1). The reported utility and attack results come from WebArena Verified and WASP evaluations.

- Record JSON: https://awesomecua.com/resources/arxiv-2611-06039/record.json

## Authors

Annabella Chow, Jinhao Zhu, Sylvie Venuto, Abdulaziz Alharbi, Basel Alomair, Raluca Popa, David Wagner, Julien Piet

## Citation exports

- BibTeX: https://awesomecua.com/resources/arxiv-2611-06039/citation.bib
- CSL JSON: https://awesomecua.com/resources/arxiv-2611-06039/citation.csl.json

## Recorded arXiv snapshot

- Version: 1
- Version source: https://arxiv.org/abs/2611.06039v1
- First submission: 2026-11-04T06:42:35Z
- Version updated: 2026-11-04T06:42:35Z
- Abstract SHA-256: 5ef5340948959228cc56b1e4d9169111c432070f45af4c2017746d4b632bb920
- Abstract hash normalization: sha256-utf8-whitespace-collapsed-v1

## License declarations

- code: not recorded
- data: not recorded
- document: not recorded
- weights: not recorded

## Primary evidence

- https://export.arxiv.org/api/query?id_list=2611.05873%2C2611.06039%2C2611.06544%2C2611.06854&max_results=4 (retrieved 2026-11-05T08:25:56Z; SHA-256 f0738ff787e6bcacf21df5c9c49e73a06b1c446d146cd9f29f407b284eed10e2)
- https://export.arxiv.org/api/query?id_list=2611.03930%2C2611.04073%2C2611.04142%2C2611.04393%2C2611.04785%2C2611.04879%2C2611.05036%2C2611.05263%2C2611.05873%2C2611.06039%2C2611.06544%2C2611.06854&max_results=12 (retrieved 2026-11-05T23:03:30Z; SHA-256 0c7bfb6af7650b096faabf37eb8c024f2877842018cf9aa212c0a3b9aef98252)