mlsanityData to 14 Oct 2026

Comparing Human Oversight Strategies for Computer-Use Agents

arXiv 2604.04918 ↗First posted 6 Apr 2026cs.HCcited by 6

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

LLM-powered computer-use agents (CUAs) shift users from direct manipulation to supervising an unfolding action sequence, yet existing oversight research mostly evaluates static decisions rather than real-time oversight across an agent trajectory. We compared four oversight strategies with 48 participants across 192 live web sessions. Quantitative results show that oversight strategy affected exposure to problematic actions, but not users' ability to intervene. Behavioral analysis shows why: control often returned too early or too late, creating a timing mismatch within the action sequence. Even when control arrived at the right moment, users judged whether the agent acted correctly, not whether the action was safe. Front-loading oversight into a plan did not solve this either: plans constrained unplanned actions but left unlisted safeguards unaddressed, while upfront approval inhibited runtime scrutiny. These findings show that oversight depends less on maximizing control than on aligning authority, timing, and attention with decision-critical moments.

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 18 of its 64 references that are in the map. First posted on arXiv 6 Apr 2026.

Builds on

18 of 64 references.

Closest ancestors · 4

Same direction, newest first

  1. 2025DECEPTICON: How Dark Patterns Manipulate Web Agents28 Dec
  2. 2025Dark Patterns Meet GUI Agents: LLM Agent Susceptibility to Manipulative Interfaces and the Role of Human Oversight12 Sep
  3. 2025The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections15 Apr
  4. 2024Privacy Leakage Overshadowed by Views of AI: A Study on Human Oversight of Privacy in Language Model Agent2 Nov

Other references · 14

  1. 2020Does the Whole Exceed its Parts? The Effect of AI Explanations on Complementary Team Performancecited by 399
  2. 2023Appropriate Reliance on AI Advice: Conceptualization and the Effect of Explanationscited by 83
  3. 2023Understanding the Role of Human Intuition on Reliance in Human-AI Decision-Making with Explanationscited by 73
  4. 2025Plan-Then-Execute: An Empirical Study of User Trust and Team Performance When Using LLM Agents As A Daily Assistantcited by 54
  5. 2025Magentic-UI: Towards Human-in-the-loop Agentic Systemscited by 43
  6. 2024Cocoa: Co-Planning and Co-Execution with AI Agentscited by 39
  7. 2026Intelligent AI Delegationcited by 18
  8. 2023An Ontology of Dark Patterns Knowledge: Foundations, Definitions, and a Pathway for Shared Knowledge-Buildingcited by 14
  9. 2026Optimizing Agent Planning for Security and Autonomycited by 10
  10. 2025PrivWeb: Unobtrusive and Content-aware Privacy Protection For Web Agentscited by 9
  11. 2025Characterizing Unintended Consequences in Human-GUI Agent Collaboration for Web Browsingcited by 7
  12. 2026SPARK: Real-Time Monitoring of Multi-Faceted Programming Exercisescited by 5
2 more
  1. 2025Through the Lens of Human-Human Collaboration: A Configurable Research Platform for Exploring Human-Agent Collaborationcited by 4
  2. 2026From Human-Human Collaboration to Human-Agent Collaboration: A Vision, Design Philosophy, and an Empirical Framework for Achieving Successful Partnerships Between Humans and LLM Agentscited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 6.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Oversight Has a Capacity: Calibrating Agent Guards to a Subjective, Fatiguing Human
  2. 2026Human oversight of agentic systems in practice: Examining the oversight work, challenges, and heuristics of developers using software agents
  3. 2026Human Control Is the Anchor, Not the Answer: Early Divergence of Oversight in Agentic AI Communities
  4. 2025Just Do It!? Computer-Use Agents Exhibit Blind Goal-Directedness
  5. 2026Anticipatory Human Oversight of Agentic AI: A Philosophical Account
  6. 2026Reframing LLM Agent Security as an Agent-Human Interaction Problem
  7. 2026Instrumental Monitor Evasion Emerges Under Ordinary Task Pressure
  8. 2026How does information access affect LLM monitors' ability to detect sabotage?