docs: the Mac Browser tab's privacy line for agents driving it

Merged
DA
11d ago
+30-3

Part of the "Browser agent tab automation setup" plan (Mac path, M1 and M2). Docs only; no code.

HELD for Dean: do not merge. AGENTS.md changes only with his explicit approval. The approval date in the AGENTS.md amendment is a placeholder, DATE-FOR-DEAN, for him to fill in.

What changes

  • AGENTS.md: amends the Browser tab carve-out (approved 2026-10-16). While that Mac's "Let agents run commands on this Mac" switch (macCommands) is on, an agent on a task may drive that task's Browser tabs on the Mac, with no approval for each action. A tab's address, title, a downscaled screenshot and a text snapshot then also reach the agent and its workers, the service and the model, and the agent's transcript. Screenshots go to the model and are left out of the stored conversation, as look_at_picture does. The rest of the line stands: never into a trace, a counted event, a fixture, app state or the voice window, and kept out of the screen recording.
  • PRIVACY.md: the Browser tabs paragraph now says outright that, with the switch on, an agent can act as you on any site you are signed in to in a Browser tab. It also says what reaches the model and what is kept. The "Your choices" bullet for the switch now mentions Browser tabs.

The cloud-browser line (PR A) is not touched here. If it lands first, the two lines need to stay consistent.

Made with Luke

Devin Review