What an agent-native browser should own

If an agent can act inside a browser, who should remember what it is allowed to do? The model could remember. The application that connected it could remember. A chat panel could keep a list somewhere. All three answers work until the model changes, another client connects, or the user takes control of the tab. The browser is the only part of this system that sees the whole situation. It knows…