AgentBay: A Hybrid Interaction Sandbox for Seamless Human-AI Intervention in Agentic Systems
On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks
Abstract (arXiv)
The rapid advancement of Large Language Models (LLMs) is catalyzing a shift towards autonomous AI Agents capable of executing complex, multi-step tasks. However, these agents remain brittle when faced with real-world exceptions, making Human-in-the-Loop (HITL) supervision essential for mission-critical applications. In this paper, we present AgentBay, a novel sandbox service designed from the ground up for hybrid interaction. AgentBay provides secure, isolated execution environments spanning Windows, Linux, Android, Web Browsers, and Code interpreters. Its core contribution is a unified session accessible via a hybrid control interface: An AI agent can interact programmatically via mainstream interfaces (MCP, Open Source SDK), while a human operator can, at any moment, seamlessly take over full manual control. This seamless intervention is enabled by Adaptive Streaming Protocol (ASP). Unlike traditional VNC/RDP, ASP is specifically engineered for this hybrid use case, delivering an ultra-low-latency, smoother user experience that remains resilient even in weak network environments. It achieves this by dynamically blending command-based and video-based streaming, adapting its encoding strategy based on network conditions and the current controller (AI or human). Our evaluation demonstrates strong results in security, performance, and task completion rates. In a benchmark of complex tasks, the AgentBay (Agent + Human) model achieved more than 48% success rate improvement. Furthermore, our ASP protocol reduces bandwidth consumption by up to 50% compared to standard RDP, and in end-to-end latency with around 5% reduction, especially under poor network conditions. We posit that AgentBay provides a foundational primitive for building the next generation of reliable, human-supervised autonomous systems.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 13 of its 26 references that are in the map. First posted on arXiv 4 Dec 2025.
Builds on
13 of 26 references.
Closest ancestors · 2
Same direction, newest first
- 2024Auto-Arena: Automating LLM Evaluations with Agent Peer Battles and Committee Discussions30 May
- 2023A Survey on Large Language Model based Autonomous Agents22 Aug
Other references · 11
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2024GPT-4V(ision) is a Generalist Web Agent, if Groundedcited by 547
- 2021A Survey of Human-in-the-loop for Machine Learningcited by 214
- 2024CodeAgent: Autonomous Communicative Agents for Code Reviewcited by 33
- 2025Towards Enterprise-Ready Computer Using Generalist Agentcited by 31
- 2025WebChoreArena: Evaluating Web Browsing Agents on Realistic Tedious Web Taskscited by 29
- 2025Large Language Model-based Data Science Agent: A Surveycited by 22
- 2024Oedipus: LLM-enchanced Reasoning CAPTCHA Solvercited by 20
- 2023Games for Artificial Intelligence Research: A Review and Perspectivescited by 14
- 2025BrowserArena: Evaluating LLM Agents on Real-World Web Navigation Taskscited by 12
- 2025Agent-Initiated Interaction in Phone UI Automationcited by 4
Built on by
Citing papers per year: 2026: 5.
5 papers.
- 2026Automating Agent Hijacking via Structural Template Injectioncited by 6
- 2026SKILL.nb: Selective Formalization and Gated Execution for Durable Agent Workflowscited by 3
- 2026Wuying-Browser-Agent: Real-World Centric Fundamental Long-Horizon Browser Agentscited by 1
- 2026The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and Time-of-Check-to-Time-of-Use Vulnerabilitiescited by 0
- 2026Rethinking Agent Security as a Networking Problemcited by 0
- 2026Wuying-Browser-Agent: Real-World Centric Fundamental Long-Horizon Browser Agents18 Aug 2026
- 2026Rethinking Agent Security as a Networking Problem12 Aug 2026
- 2026The Balkanization of Execution-Security Research for AI Coding Agents: Isolation, Access Control, and Time-of-Check-to-Time-of-Use Vulnerabilities7 Jul 2026
- 2026SKILL.nb: Selective Formalization and Gated Execution for Durable Agent Workflows6 Jun 2026
- 2026Automating Agent Hijacking via Structural Template Injection18 Feb 2026
Similar, not cited
Close in wording, no citation either way
- 2025Magentic-UI: Towards Human-in-the-loop Agentic Systems
- 2025Interaction as Intelligence Part II: Asynchronous Human-Agent Rollout for Long-Horizon Task Training
- 2026AOHP: An Open-Source OS-Level Agent Harness for Personalized, Efficient and Secure Interaction
- 2026AgentRob: From Virtual Forum Agents to Hijacked Physical Robots
- 2024Agent S: An Open Agentic Framework that Uses Computers Like a Human
- 2025Fault-Tolerant Sandboxing for AI Coding Agents: A Transactional Approach to Safe Autonomous Execution
- 2025Building Browser Agents: Architecture, Security, and Practical Solutions
- 2025From Conversation to Orchestration: HCI Challenges and Opportunities in Interactive Multi-Agentic Systems