{
  "aliases": [],
  "authors": [
    "Annabella Chow",
    "Jinhao Zhu",
    "Sylvie Venuto",
    "Abdulaziz Alharbi",
    "Basel Alomair",
    "Raluca Popa",
    "David Wagner",
    "Julien Piet"
  ],
  "details": {
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "5ef5340948959228cc56b1e4d9169111c432070f45af4c2017746d4b632bb920",
      "submitted_at": "2026-11-04T06:42:35Z",
      "updated_at": "2026-11-04T06:42:35Z",
      "version": 1,
      "versioned_url": "https://arxiv.org/abs/2611.06039v1"
    }
  },
  "environments": [
    "web"
  ],
  "evidence": [
    {
      "method": "arxiv_api",
      "retrieved_at": "2026-11-05T08:25:56Z",
      "role": "primary",
      "sha256": "f0738ff787e6bcacf21df5c9c49e73a06b1c446d146cd9f29f407b284eed10e2",
      "supports": [
        "name",
        "authors",
        "published_at",
        "updated_at",
        "identifiers.arxiv",
        "details.arxiv_snapshot"
      ],
      "url": "https://export.arxiv.org/api/query?id_list=2611.05873%2C2611.06039%2C2611.06544%2C2611.06854&max_results=4"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-11-05T23:03:30Z",
      "role": "primary",
      "sha256": "0c7bfb6af7650b096faabf37eb8c024f2877842018cf9aa212c0a3b9aef98252",
      "supports": [
        "name",
        "kind",
        "summary",
        "environments",
        "topics",
        "scope",
        "relations"
      ],
      "url": "https://export.arxiv.org/api/query?id_list=2611.03930%2C2611.04073%2C2611.04142%2C2611.04393%2C2611.04785%2C2611.04879%2C2611.05036%2C2611.05263%2C2611.05873%2C2611.06039%2C2611.06544%2C2611.06854&max_results=12"
    }
  ],
  "id": "arxiv:2611.06039",
  "identifiers": {
    "arxiv": "2611.06039"
  },
  "kind": "paper",
  "last_verified_at": "2026-11-05T23:03:30Z",
  "licenses": {
    "code": null,
    "data": null,
    "document": null,
    "weights": null
  },
  "links": [
    {
      "rel": "primary",
      "url": "https://arxiv.org/abs/2611.06039"
    }
  ],
  "name": "Securing Web Agents with the Compile-Then-Execute Paradigm",
  "notes": "The annotation and scope were reviewed against the complete retained arXiv abstract (v1). The reported utility and attack results come from WebArena Verified and WASP evaluations.",
  "published_at": "2026-11-04",
  "relations": [],
  "review_status": "curated",
  "scope": "core",
  "summary": "Baya compiles a web task into a program using a Trusted Website API before viewing live content, limiting how webpage prompt injections can alter agent control flow.",
  "topics": [
    "safety-security",
    "web-navigation",
    "planning",
    "tool-integration"
  ],
  "updated_at": "2026-11-04",
  "url": "https://arxiv.org/abs/2611.06039"
}