A sealed-off browser for agent tasks
Being built as an isolated browser an agent borrows for a set time, kept apart from Chat.
Computer is an isolated, lease-governed browser worker owned by Ethen Platform. It runs browser tasks in its own sandbox, apart from the products that ask for them.
Computer is not a Chat feature. Chat and other products do not run it themselves; a session runs only under a lease that the Platform grants.
Web page content
Untrusted; injection classifier
Session
- Request: Planned
- Approval: Planned
- Action: Tests only
- Receipt: Planned
01Layers
Isolation layers around a Computer session
Isolation layers around a Computer session
Web page content
Untrusted; injection classifier
L1 · Authorises the session
Platform lease
Lease checks: implemented in development
02Session
From request to receipt
- 01 →Planned
Request
An Ethen product
A product asks the Platform for a session. Making the worker available to products is planned; no product offers it today.
- 02 →Planned
Approval
A person, through Approvals
A person approves a consequential action. Approvals in front of Computer actions are planned.
About approvals - 03 →Tests only
Action
Computer worker
The worker acts inside the leased session and its sandbox. Today it runs only in development tests, not on real public websites.
- 04 ■Planned
Receipt
Approvals & evidence
Receipts record what was approved and what ran. Receipts for Computer actions depend on the planned approvals work.
About approvals
03Ownership
Computer is not a Chat feature.
Computer is not a Chat feature. Chat and other products do not run it themselves; a session runs only under a lease that the Platform grants.
Computer is a Platform worker with its own status. It is not a Chat feature, and Chat does not run computer-use tasks.
- Who owns it
- Ethen Platform
- Who may ask for it
- None today. Access for products, through the Platform, is planned.
04What exists
Built and tested in development, not on real sites
Implemented
- An isolated worker that drives a browser inside a sandbox, built with Playwright.
- An egress guard that limits which network destinations the worker can reach.
- A prompt-injection classifier, tested against a suite of 40 injection fixture pages.
- Lease checks: before it acts, the worker inspects the lease that authorises the session, and it works inside a governed session.
- Automated test suites, including a Docker sandbox run and a real-browser worker journey. Results were recorded in development and have not been re-run for this page.
Planned
- Running tasks on real public websites. Behaviour on real sites is not yet established.
- Making the worker available to Ethen products through the Platform. No product offers it today.
Limits
- It is not available in Chat or in any other product.
- It works in its own sandbox and does not take control of your device.
- We publish no task success rates.
- Not available for general use; nothing here is a release promise or date.
Behaviour on real public websites is not yet established.
05Questions
Questions
01Is Computer part of Chat?
No. Computer is a Platform worker with its own status. It is not a Chat feature, and Chat does not run computer-use tasks.
02Can I try Computer?
No. It is in development and runs only in development tests. The availability page shows its current status.
03Does Computer take control of my device?
No. It works in its own sandbox and does not take control of your device. Sessions run only under a lease that the Platform grants, in development tests today.
Status and related pages
Computer is a Platform worker in development. It is not available in Chat or in any other product.