Comparing Human Oversight Strategies for Computer-Use Agents
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
LLM-powered computer-use agents (CUAs) shift users from direct manipulation to supervising an unfolding action sequence, yet existing oversight research mostly evaluates static decisions rather than real-time oversight across an agent trajectory. We compared four oversight strategies with 48 participants across 192 live web sessions. Quantitative results show that oversight strategy affected exposure to problematic actions, but not users' ability to intervene. Behavioral analysis shows why: control often returned too early or too late, creating a timing mismatch within the action sequence. Even when control arrived at the right moment, users judged whether the agent acted correctly, not whether the action was safe. Front-loading oversight into a plan did not solve this either: plans constrained unplanned actions but left unlisted safeguards unaddressed, while upfront approval inhibited runtime scrutiny. These findings show that oversight depends less on maximizing control than on aligning authority, timing, and attention with decision-critical moments.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 18 of its 64 references that are in the map. First posted on arXiv 6 Apr 2026.
Builds on
18 of 64 references.
Closest ancestors · 4
Same direction, newest first
- 2025DECEPTICON: How Dark Patterns Manipulate Web Agents28 Dec
- 2025Dark Patterns Meet GUI Agents: LLM Agent Susceptibility to Manipulative Interfaces and the Role of Human Oversight12 Sep
- 2025The Obvious Invisible Threat: LLM-Powered GUI Agents' Vulnerability to Fine-Print Injections15 Apr
- 2024Privacy Leakage Overshadowed by Views of AI: A Study on Human Oversight of Privacy in Language Model Agent2 Nov
Other references · 14
- 2020Does the Whole Exceed its Parts? The Effect of AI Explanations on Complementary Team Performancecited by 399
- 2023Appropriate Reliance on AI Advice: Conceptualization and the Effect of Explanationscited by 83
- 2023Understanding the Role of Human Intuition on Reliance in Human-AI Decision-Making with Explanationscited by 73
- 2025Plan-Then-Execute: An Empirical Study of User Trust and Team Performance When Using LLM Agents As A Daily Assistantcited by 54
- 2025Magentic-UI: Towards Human-in-the-loop Agentic Systemscited by 43
- 2024Cocoa: Co-Planning and Co-Execution with AI Agentscited by 39
- 2026Intelligent AI Delegationcited by 18
- 2023An Ontology of Dark Patterns Knowledge: Foundations, Definitions, and a Pathway for Shared Knowledge-Buildingcited by 14
- 2026Optimizing Agent Planning for Security and Autonomycited by 10
- 2025PrivWeb: Unobtrusive and Content-aware Privacy Protection For Web Agentscited by 9
- 2025Characterizing Unintended Consequences in Human-GUI Agent Collaboration for Web Browsingcited by 7
- 2026SPARK: Real-Time Monitoring of Multi-Faceted Programming Exercisescited by 5
2 more
- 2025Through the Lens of Human-Human Collaboration: A Configurable Research Platform for Exploring Human-Agent Collaborationcited by 4
- 2026From Human-Human Collaboration to Human-Agent Collaboration: A Vision, Design Philosophy, and an Empirical Framework for Achieving Successful Partnerships Between Humans and LLM Agentscited by 2
Built on by
Citing papers per year: 2026: 6.
6 papers.
- 2026AI Agents Push Humans Out of the Loopcited by 5
- 2026Plans They Abandon, Reports They Author: The Narrative Layer of Autonomous Agentscited by 3
- 2026Exploring LLM Agent Designs and Interaction Modalities for Scientific Visualizationcited by 2
- 2026AI Snitches Get Glitches: Towards Evading Agentic Surveillancecited by 0
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Controlcited by 0
- 2026The Work Behind Delegation: A Framework for Supervising AI Coding Agentscited by 0
- 2026The Work Behind Delegation: A Framework for Supervising AI Coding Agents21 Sep 2026
- 2026Plans They Abandon, Reports They Author: The Narrative Layer of Autonomous Agents10 Sep 2026
- 2026AI Agents Push Humans Out of the Loop24 Aug 2026
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Control20 Aug 2026
- 2026AI Snitches Get Glitches: Towards Evading Agentic Surveillance24 Jun 2026
- 2026Exploring LLM Agent Designs and Interaction Modalities for Scientific Visualization30 Apr 2026
Similar, not cited
Close in wording, no citation either way
- 2026Oversight Has a Capacity: Calibrating Agent Guards to a Subjective, Fatiguing Human
- 2026Human oversight of agentic systems in practice: Examining the oversight work, challenges, and heuristics of developers using software agents
- 2026Human Control Is the Anchor, Not the Answer: Early Divergence of Oversight in Agentic AI Communities
- 2025Just Do It!? Computer-Use Agents Exhibit Blind Goal-Directedness
- 2026Anticipatory Human Oversight of Agentic AI: A Philosophical Account
- 2026Reframing LLM Agent Security as an Agent-Human Interaction Problem
- 2026Instrumental Monitor Evasion Emerges Under Ordinary Task Pressure
- 2026How does information access affect LLM monitors' ability to detect sabotage?