Computer-Use Machines Need Custody Records

An unpatched browser in that instance isn’t a compliance footnote. It’s an entry point. A malicious page can attack the agent’s execution environment through the same routes that target any browser: an exploit chain against an unpatched rendering engine, a hostile extension loaded into the runtime, or injected page content that rewrites what the agent reads and consequently what it submits through the forms it fills in. The agent doesn’t know it’s being attacked. It just sees a page and interacts with it the way it was told to.