HeartBeatAgents Browser Control

Give your AI teammates a browser, without giving them your password. HeartBeatAgents Browser Control lets agents running in your organization's HeartBeatAgents platform work inside your own signed-in browser. Work that needs a logged-in session, such as pulling a report from an internal tool, checking an order, or filling a form behind a login, can be done by an agent without anyone sharing credentials. AUTHORITY HAS TWO HALVES, AND YOU HOLD ONE OF THEM An agent can act on a site only when both exist: a grant created in your platform, naming the agent, the site, what it may do and when access ends; and Chrome's own permission for that site, which you approve yourself. Remove either one and the agent stops. Revoking the Chrome permission alone is enough, from Chrome's own settings, with nothing to do in the platform. IT STARTS WITH NOTHING The extension requests no site access when installed. It asks for one origin at a time, at the moment you grant that site, and never holds access to anything else. Tabs on sites you have not granted are never reported and their addresses are never transmitted. YOUR DATA GOES TO YOUR PLATFORM, AND NOWHERE ELSE The extension talks only to the HeartBeatAgents address you enter when pairing. For self-hosted deployments that is infrastructure your organisation runs. Mosaic Singularity receives nothing: no page content, no browsing activity, no credentials. There is no analytics, no third-party service, no telemetry. CREDENTIALS ARE REFUSED, NOT TRUSTED Fields a page declares as a password, one-time code, or card number, expiry or security code are never read and never transmitted. The extension cannot take screenshots. It detects that a person has started using the browser by observing only that a key or pointer event occurred, never which key or what was typed. START TYPING AND THE AGENT STOPS If you use the browser while an agent is working, its pending action is cancelled and it is told a person is here, so it looks again before doing anything. It will not type over you or navigate away from what you are reading. EVERYTHING IS RECORDED Pairing, every grant, every revocation, and every action an agent takes in your browser are written to your deployment's audit log, under your retention policy. Requires a HeartBeatAgents platform. Grants expire within 30 days and must be renewed.