PRODUCTION SCENARIO
A team prototypes a computer-use agent that fills expense forms in a web portal. The plan is to run it on an engineer's laptop inside the corporate SSO session with unrestricted internet.
Which setup matches Anthropic's precautions for running computer use?
Answering here is anonymous. Nothing is saved unless you sign in.
Show answer and explanation
Answer: A minimal-privilege VM with no stored credentials, an allowlist, and sign-off
The documented precautions stack: a dedicated VM or container with minimal privileges, no access to login credentials, internet limited to an allowlist of domains, and a human confirming any action with real-world consequences. A hardened VM that still carries the SSO session fails the credentials precaution, so an injected instruction spends real money. An admin account removes the confirmation step instead of adding it. And a second OS login on the same laptop and network is not isolation at all.