{"id":"https://openalex.org/W7125432823","doi":"https://doi.org/10.48550/arxiv.2601.14660","title":"NeuroFilter: Activation-Based Guardrails for Privacy-Conscious LLM Agents","display_name":"NeuroFilter: Activation-Based Guardrails for Privacy-Conscious LLM Agents","publication_year":2026,"publication_date":"2026-01-21","ids":{"openalex":"https://openalex.org/W7125432823","doi":"https://doi.org/10.48550/arxiv.2601.14660"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2601.14660","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2601.14660","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2601.14660","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5123617789","display_name":"Saswat Das","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Das, Saswat","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5123620929","display_name":"Ferdinando Fioretto","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fioretto, Ferdinando","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.42170000076293945,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.42170000076293945,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.09130000323057175,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.0649000033736229,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.578000009059906},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.5235000252723694},{"id":"https://openalex.org/keywords/filter","display_name":"Filter (signal processing)","score":0.43849998712539673},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4043000042438507},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.3573000133037567},{"id":"https://openalex.org/keywords/norm","display_name":"Norm (philosophy)","score":0.34950000047683716},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.33880001306533813}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7646999955177307},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.578000009059906},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.5235000252723694},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.43849998712539673},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.41819998621940613},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4043000042438507},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39590001106262207},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.3573000133037567},{"id":"https://openalex.org/C191795146","wikidata":"https://www.wikidata.org/wiki/Q3878446","display_name":"Norm (philosophy)","level":2,"score":0.34950000047683716},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.33880001306533813},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.3343000113964081},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.30320000648498535},{"id":"https://openalex.org/C66024118","wikidata":"https://www.wikidata.org/wiki/Q1122506","display_name":"Computational model","level":2,"score":0.2847999930381775},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.2809000015258789},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.2793000042438507},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.2775000035762787},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.26899999380111694}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2601.14660","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2601.14660","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2601.14660","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2601.14660","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7382418513298035,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Agentic":[0],"Large":[1],"Language":[2],"Models":[3],"(LLMs)":[4],"are":[5,19,94,103,129],"models":[6],"able":[7],"to":[8,48,77,80,105,163],"reason,":[9],"plan,":[10],"and":[11,30,40,96,133,138],"execute":[12],"tools":[13],"over":[14],"unstructured":[15],"data.":[16],"These":[17],"abilities":[18],"enabling":[20],"transformative":[21],"applications":[22],"in":[23],"domains":[24],"spanning":[25],"from":[26],"personal":[27,50],"assistant,":[28],"financial,":[29],"legal":[31],"domains.":[32],"While":[33,68],"these":[34,92,127],"systems":[35],"can":[36],"substantially":[37],"improve":[38],"productivity":[39],"service":[41],"quality,":[42],"effective":[43,134],"agency":[44],"typically":[45],"requires":[46],"access":[47,56],"sensitive":[49],"or":[51],"organizational":[52],"information.":[53],"However,":[54,91],"this":[55,110,112,143],"introduces":[57],"critical":[58],"inference-time":[59],"privacy":[60,81,118],"risks,":[61],"specifically":[62],"regarding":[63],"contextually":[64],"appropriate":[65],"information":[66],"disclosure.":[67],"recent":[69],"studies":[70],"highlight":[71],"the":[72,146,165],"inability":[73],"of":[74,117,168],"agentic":[75],"LLMs":[76],"consistently":[78],"adhere":[79],"norms,":[82],"existing":[83],"defenses":[84,93],"often":[85],"rely":[86],"on":[87,121],"auxiliary":[88],"LLM-based":[89],"monitors.":[90],"expensive":[95],"offer":[97],"limited":[98],"protection":[99],"against":[100],"attacks":[101],"that":[102,126],"robust":[104],"semantic":[106],"censorship.":[107],"To":[108],"contrast":[109],"background,":[111],"paper":[113],"proposes":[114],"a":[115,155],"notion":[116],"filters":[119,128],"based":[120],"activation":[122],"probing.":[123],"We":[124],"show":[125],"both":[130,136],"computationally":[131],"efficient":[132],"for":[135],"single-turn":[137],"multi-turn":[139],"conversational":[140],"settings.":[141],"Furthermore,":[142],"work":[144],"provides":[145],"first":[147],"systematic":[148],"investigation":[149],"into":[150],"probing":[151],"model":[152],"internals":[153],"across":[154],"conversation":[156],"trajectory,":[157],"moving":[158],"beyond":[159],"static,":[160],"single-prompt":[161],"analysis":[162],"capture":[164],"evolving":[166],"state":[167],"privacy-sensitive":[169],"interactions.":[170]},"counts_by_year":[],"updated_date":"2026-07-03T06:15:21.484131","created_date":"2026-01-23T00:00:00"}