Before Acting, Change the State: Prospective State Intervention for Web Agents under Deceptive Interfaces
Veer is introduced, an agent-side runtime defense that leaves task planning to the base agent and intervenes on Web state when a proposed action would produce an unauthorized consequence, establishing task-relevant Web state as an effective runtime control target for protecting Web agents from deceptive outcomes.