dropthejase gives the agent a leash for the open web

Louis can now browse the web, but only to sites on a list the team can edit without a redeploy.

integrationsecurity

The fork adds a web-browsing tool to its AI agent, with a twist: the list of approved domains lives in cloud storage rather than baked into the code. That means whoever runs the system can add or remove sites on the fly - useful when a matter suddenly needs access to a new court portal or regulator's site, and dangerous to leave wide open.

Notably, dropthejase tried Amazon's off-the-shelf managed browser for agents first and ripped it back out, building a homemade version instead. The likely reason: the managed product didn't give enough control over authentication and which sites the agent could touch - exactly the levers a legal team needs to keep an AI from wandering somewhere it shouldn't.

So what Worth a look for anyone weighing how to let a legal AI read the live web without handing it the whole internet.

View this fork on GitHub →

Spotted something wrong? Or know the PR text has fresher detail than the writeup above?

Commits in this thread

4 commits from dropthejase/louis, oldest first. Source extracted verbatim from the harvested git log.

SHA	Subject	Author	Date
`9196cbc5`	feat(browse-web): add web browsing tool with S3-backed domain allowlist	Jason Lee	2026-05-15	↗ GitHub
commit body Adds browse_web tool to the main agent using fetch() + HTML stripping. Domain allowlist loaded from admin S3 bucket (browse-allowlist.json) at container startup, with hardcoded fallback if S3 unavailable. Introduces AgentStack (shared admin config bucket + AgentCore Browser resource) and wires ADMIN_BUCKET_NAME through ApiStack props, agentCoreRole IAM policy, and deploy-agent.sh env vars.
`5a568f43`	feat: merge feature/web-search - browse_web tool with S3-backed domain allowlist	Jason Lee	2026-05-15	↗ GitHub
`80ff0272`	docs(readme): add Web Search to Additional Features	Jason Lee	2026-05-15	↗ GitHub
`f6da49c2`	feat(infra): remove AgentCore Browser infrastructure	Jason Lee	2026-05-15	↗ GitHub
CfnBrowserCustom, BrowserExecutionRole, BROWSER_ARN env var, and AgentCoreBrowser IAM policy removed. browse_web tool (plain HTTP fetch with S3-backed allowlist) is unaffected.

Capture this thread into my fork

Download a single Markdown prompt that tells Claude how to port every commit above into your working tree — adapting paths and structure to match your repo. Run it via claude -p < capture-thread-349.md from inside the repo you want the changes in.

⬇ Download capture-thread-349.md