Read freely, confirm before writing: a safety model for computer-use agents

How I built a browser agent for no-API tools that treats every mutating click as a refused action by default.