{"id":"https://openalex.org/W7224743185","doi":"https://doi.org/10.48550/arxiv.2610.39532","title":"Judging Before Propagation: Task-Graph Contextual Integrity for Multi-Agent Privacy","display_name":"Judging Before Propagation: Task-Graph Contextual Integrity for Multi-Agent Privacy","publication_year":2026,"publication_date":"2026-10-29","ids":{"openalex":"https://openalex.org/W7224743185","doi":"https://doi.org/10.48550/arxiv.2610.39532"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2610.39532","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.39532","pdf_url":"https://arxiv.org/pdf/2610.39532","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2610.39532","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5160157177","display_name":"Hengyu Wu","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4400009020","display_name":"Institute of Science Tokyo","ror":"https://ror.org/05dqf9946","country_code":"JP","type":"education","lineage":["https://openalex.org/I4400009020"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Wu, Hengyu","raw_affiliation_strings":["Department of Computer Science , School of Computing Institute of Science Tokyo"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science , School of Computing Institute of Science Tokyo","institution_ids":["https://openalex.org/I4400009020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062431837","display_name":"Blaise Delattre","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4400009020","display_name":"Institute of Science Tokyo","ror":"https://ror.org/05dqf9946","country_code":"JP","type":"education","lineage":["https://openalex.org/I4400009020"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Delattre, Blaise","raw_affiliation_strings":["Department of Computer Science , School of Computing Institute of Science Tokyo"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science , School of Computing Institute of Science Tokyo","institution_ids":["https://openalex.org/I4400009020"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5160200126","display_name":"Yang Cao","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4400009020","display_name":"Institute of Science Tokyo","ror":"https://ror.org/05dqf9946","country_code":"JP","type":"education","lineage":["https://openalex.org/I4400009020"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Cao, Yang","raw_affiliation_strings":["Department of Computer Science , School of Computing Institute of Science Tokyo"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science , School of Computing Institute of Science Tokyo","institution_ids":["https://openalex.org/I4400009020"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4400009020"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.8285999894142151,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.8285999894142151,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.13220000267028809,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.018200000748038292,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/contextual-integrity","display_name":"contextual integrity","score":0.9599999785423279},{"id":"https://openalex.org/keywords/multi-agent-systems","display_name":"multi-agent systems","score":0.8339999914169312},{"id":"https://openalex.org/keywords/llm-based-agents","display_name":"LLM agents","score":0.7369999885559082},{"id":"https://openalex.org/keywords/information-dissemination","display_name":"information dissemination","score":0.718999981880188},{"id":"https://openalex.org/keywords/task-graphs","display_name":"task graphs","score":0.6029999852180481},{"id":"https://openalex.org/keywords/privacy-enforcement","display_name":"privacy enforcement","score":0.4009999930858612},{"id":"https://openalex.org/keywords/privacy-utility-trade-off","display_name":"privacy-utility trade-off","score":0.6930000185966492}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7017999887466431},{"id":"https://openalex.org/C9354725","wikidata":"https://www.wikidata.org/wiki/Q286017","display_name":"Operationalization","level":2,"score":0.6995000243186951},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5622000098228455},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5583000183105469},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.4903999865055084},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4616999924182892},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.4587000012397766},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.4514999985694885},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4401000142097473},{"id":"https://openalex.org/C2776207758","wikidata":"https://www.wikidata.org/wiki/Q5303302","display_name":"Downstream (manufacturing)","level":2,"score":0.3643999993801117},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.35519999265670776},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.3456000089645386},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.3425999879837036},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3310999870300293},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.3240000009536743},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.3179999887943268},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.3165000081062317},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.31299999356269836},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.31029999256134033},{"id":"https://openalex.org/C25343380","wikidata":"https://www.wikidata.org/wiki/Q277521","display_name":"Relation (database)","level":2,"score":0.30869999527931213},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.2833999991416931},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.28290000557899475},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.27730000019073486},{"id":"https://openalex.org/C16311509","wikidata":"https://www.wikidata.org/wiki/Q4148050","display_name":"Dependency graph","level":3,"score":0.27639999985694885},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.26260000467300415},{"id":"https://openalex.org/C2779208394","wikidata":"https://www.wikidata.org/wiki/Q7140460","display_name":"Participatory sensing","level":2,"score":0.2578999996185303},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2540000081062317},{"id":"https://openalex.org/C65059942","wikidata":"https://www.wikidata.org/wiki/Q270105","display_name":"Argumentation theory","level":2,"score":0.2533000111579895}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2610.39532","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.39532","pdf_url":"https://arxiv.org/pdf/2610.39532","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2610.39532","doi":"https://doi.org/10.48550/arxiv.2610.39532","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2610.39532","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2610.39532","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.39532","pdf_url":"https://arxiv.org/pdf/2610.39532","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7224743185.pdf","grobid_xml":"https://content.openalex.org/works/W7224743185.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7222346869","https://openalex.org/W7167607241","https://openalex.org/W4415194490","https://openalex.org/W7134068386","https://openalex.org/W4415164739","https://openalex.org/W7221781014","https://openalex.org/W7129258597","https://openalex.org/W7155539031","https://openalex.org/W7213563890","https://openalex.org/W7164992788"],"abstract_inverted_index":{"Multi-agent":[0],"LLM":[1],"systems":[2,54],"increasingly":[3],"rely":[4,56],"on":[5,57],"persistent":[6],"memory":[7],"and":[8,125,144,168,204],"inter-agent":[9],"communication.":[10],"These":[11],"capabilities":[12],"create":[13],"privacy":[14,206],"risks":[15],"that":[16,60,195],"extend":[17],"beyond":[18],"individual":[19],"interactions:":[20],"a":[21,36,117,120,187],"release":[22],"appropriate":[23],"in":[24,64],"isolation":[25],"may":[26],"become":[27],"inappropriate":[28],"when":[29],"combined":[30],"with":[31,66,236],"information":[32,80,134],"previously":[33],"disclosed":[34],"to":[35,40,70,102,131,174,223],"recipient":[37],"or":[38,67],"propagated":[39],"downstream":[41,166],"agents":[42],"along":[43],"the":[44,71,86,94,105,164,215,224,232,237],"planned":[45],"workflow.":[46,95],"Existing":[47],"Contextual":[48,99,110],"Integrity":[49,100,111],"(CI)":[50],"mechanisms":[51],"for":[52,78,112],"agentic":[53],"typically":[55],"local":[58],"judgments":[59],"assess":[61],"each":[62,172],"disclosure":[63,147,200,218],"isolation,":[65],"without":[68],"regard":[69],"recipient's":[72],"history,":[73,201],"but":[74],"do":[75],"not":[76,90],"account":[77],"how":[79],"propagates":[81],"downstream.":[82],"However,":[83],"compliance":[84],"at":[85],"current":[87],"boundary":[88],"does":[89],"guarantee":[91],"appropriateness":[92],"across":[93,163,192],"We":[96,149,183],"introduce":[97,185],"Task-Graph":[98],"(TG-CI),":[101],"our":[103,209],"knowledge":[104],"first":[106],"task-graph-native":[107],"formalization":[108],"of":[109,189,231],"multi-agent":[113],"systems.":[114],"TG-CI":[115,151,213],"represents":[116],"workflow":[118],"as":[119],"Multi-Agent":[121],"Task":[122],"Graph":[123],"(MATG)":[124],"extends":[126],"CI":[127,226],"from":[128],"atomic":[129],"transfers":[130],"stateful,":[132],"graph-level":[133],"flows":[135],"by":[136,220],"jointly":[137,196],"considering":[138],"an":[139],"item's":[140],"intended":[141],"propagation":[142],"scope":[143],"recipients'":[145],"evolving":[146],"states.":[148],"operationalize":[150],"through":[152],"propagation-scoped":[153],"authorization":[154],"under":[155],"two":[156,238],"complementary":[157,242],"policies:":[158],"Full-Scope,":[159],"which":[160,170],"requires":[161],"admissibility":[162],"complete":[165],"scope,":[167],"Auto-Region,":[169],"confines":[171],"item":[173],"its":[175],"maximal":[176],"admissible":[177],"region":[178],"using":[179],"lightweight":[180],"frontier":[181],"gates.":[182],"further":[184],"MAPLE-Bench,":[186],"benchmark":[188],"144":[190],"cases":[191],"four":[193],"scenarios":[194],"vary":[197],"MATG":[198],"topology,":[199],"compromised-agent":[202],"placement,":[203],"item-level":[205],"policies.":[207],"In":[208],"primary":[210],"experimental":[211],"configuration,":[212],"reduces":[214],"mean":[216],"unauthorized":[217],"count":[219],"85.8-94.1%":[221],"relative":[222],"Local-History":[225],"baseline,":[227],"while":[228],"retaining":[229],"93.6-96.1%":[230],"baseline's":[233],"task":[234],"accuracy,":[235],"enforcement":[239],"policies":[240],"providing":[241],"privacy--cost--utility":[243],"trade-offs.":[244]},"counts_by_year":[],"updated_date":"2026-11-02T09:45:03.842371","created_date":"2026-10-31T00:00:00"}