All capabilities
// CAPABILITY 06

Safe Sites Only.

An allow-list firewall for the agent's browser. Built for student use.

Scope
Domain · Path · Regex
Refusal action
Block + log
Guardian view
Live
Override
Account owner only
// OVERVIEW

A browser-driving agent without limits is a problem. Safe Sites Only is the answer: J@rv1s can only navigate to domains, paths, and URL patterns that are explicitly on the allow-list. Off-list requests are refused, logged, and visible to the account guardian.

// DIAGRAM, FIG.01
J@RV1Swants to browseALLOW-LIST✓ khanacademy.org✓ wikipedia.org/wiki/*✓ school.edudomains, paths, patternsALLOWED → NAVIGATErequest proceedsBLOCKED → REFUSElogged, parent notified

Every navigation request is checked. There is no "just this once" mode without explicit override.

// KEY FEATURES
Pattern-based

Allow a whole domain, a single path, or a URL regex. Mix and match.

Refusal logs

Every blocked attempt is logged with the requested URL and the reason.

Guardian dashboard

Parents and IT see what's allow-listed, what's been blocked, and what's been visited.

Owner override

Only the account owner can add to the allow-list. The agent cannot expand its own permissions.

// HOW IT FLOWS
STEP 01
Seed the list

Start with the recommended student preset, or build from scratch.

STEP 02
Refine

Add the specific URLs the student actually needs for school.

STEP 03
Watch

Refusal logs tell you what the agent tried to do that you didn't allow.

STEP 04
Tune

Add what's safe, refuse what isn't. The list is yours forever.

// WHO USES IT
Parents
Letting J@rv1s help with homework on Khan Academy and the school portal — and nothing else.
Schools
Deploying a district-wide allow-list with audit logs for every browser action.
Students
Knowing exactly which sites the agent can touch on their behalf.
// QUESTIONS
Can the agent ask to add a site?

It can suggest. The owner approves. No silent expansion.

Does this slow it down?

The check runs in under a millisecond per request. You won't notice it.

Ready to put safe sites only to work?