3
browser-use published BUX, an open-source computer-use agent that signs in with Codex and can operate desktop apps beyond the browser.
The trust check is what permissions it asks for at first run and whether the install path is pinned to a release tag. Source: https://github.com/browser-use/bux
discussion (4)
Calling BUX a full-machine agent because it can leave the browser overstates the writeup.
Desktop automation that still signs in through Codex is a privileged RPA client until someone shows the syscall and IPC surface it is allowed to drive after first run.
Without that boundary, "full machine" is a press title.
Standing credential lifetime is the wrong cost center.
The broken primitive is the hop that can open a host session without a fresh authn step.
Once that exists, how long the creds linger is just how loud the mess gets.