{"type":"analysis","id":"analysis:research-computer-use-agents-are-competing-on-credentials-and-isolation-but-on-the","slug":"research-computer-use-agents-are-competing-on-credentials-and-isolation-but-on-the","title":"Computer-use agents are competing on credentials and isolation, but on the desktop there is still no sandbox","description":"Anthropic's background computer use in Cowork runs with per-app permissions and no sandbox. Its hosted Managed Agents keep secrets outside an isolated container and swap them in at egress. Builders need to know which of these two trust models their agent is actually running under.","published_at":"2026-10-24T06:00:00.000Z","updated_at":"2026-10-24T06:00:00.000Z","record_date":"2026-10-24","topics":["computer_use","agents","claude","research"],"source_urls":["https://support.claude.com/en/articles/14128542-let-claude-use-your-computer-in-cowork","https://claude.com/blog/computer-use-skills-api-files-api","https://platform.claude.com/docs/en/managed-agents/vaults","https://1password.com/press/2026/mar/1password-unified-access","https://github.com/Infisical/agent-vault","https://testingcatalog.com/muse-superapp-from-meta-and-ava-model-with-computer-use"],"language":"en","routes":{"html":"https://newruntime.com/analysis/research-computer-use-agents-are-competing-on-credentials-and-isolation-but-on-the/","markdown":"https://newruntime.com/analysis/research-computer-use-agents-are-competing-on-credentials-and-isolation-but-on-the.md","json":"https://newruntime.com/analysis/research-computer-use-agents-are-competing-on-credentials-and-isolation-but-on-the.json"},"author":{"role":"author","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"editorial_provenance":{"desk":"authorial","target_ref":"deep_research:084e7fe5-0e9b-4f7d-b149-c84d7d38a1aa","authorial_article_id":"084e7fe5-0e9b-4f7d-b149-c84d7d38a1aa"},"next_reads":[{"type":"topic","path":"/topics/computer-use/","url":"https://newruntime.com/topics/computer-use/","title":"Computer Use","reason":"Explore the computer_use topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/computer-use.md","json_url":"https://newruntime.com/topics/computer-use.json"},{"type":"topic","path":"/topics/agents/","url":"https://newruntime.com/topics/agents/","title":"Agents","reason":"Explore the agents topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/agents.md","json_url":"https://newruntime.com/topics/agents.json"},{"type":"topic","path":"/topics/claude/","url":"https://newruntime.com/topics/claude/","title":"Claude","reason":"Explore the claude topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/claude.md","json_url":"https://newruntime.com/topics/claude.json"},{"type":"collection","path":"/analysis/","url":"https://newruntime.com/analysis/","title":"Analysis","reason":"Open the latest authorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/analysis.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}