{"id":"https://openalex.org/W7134265784","doi":"https://doi.org/10.48550/arxiv.2603.05520","title":"Information-Theoretic Privacy Control for Sequential Multi-Agent LLM Systems","display_name":"Information-Theoretic Privacy Control for Sequential Multi-Agent LLM Systems","publication_year":2026,"publication_date":"2026-02-13","ids":{"openalex":"https://openalex.org/W7134265784","doi":"https://doi.org/10.48550/arxiv.2603.05520"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.05520","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.05520","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.05520","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5128395128","display_name":"Sadia Asif","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Asif, Sadia","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5010987707","display_name":"Mohammad Mohammadi Amiri","orcid":"https://orcid.org/0000-0002-7343-6628"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Amiri, Mohammad Mohammadi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.2513999938964844,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.2513999938964844,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14347","display_name":"Big Data and Digital Economy","score":0.08799999952316284,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11704","display_name":"Mobile Crowdsensing and Crowdsourcing","score":0.07999999821186066,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.5365999937057495},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4675999879837036},{"id":"https://openalex.org/keywords/information-sensitivity","display_name":"Information sensitivity","score":0.4478999972343445},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.42590001225471497},{"id":"https://openalex.org/keywords/information-flow","display_name":"Information flow","score":0.4180000126361847},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.37689998745918274},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.3709999918937683}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.758899986743927},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.5365999937057495},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4675999879837036},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.4478999972343445},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.42590001225471497},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.4180000126361847},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.37689998745918274},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.3709999918937683},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35010001063346863},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.34279999136924744},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.33629998564720154},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3305000066757202},{"id":"https://openalex.org/C41550386","wikidata":"https://www.wikidata.org/wiki/Q529909","display_name":"Multi-agent system","level":2,"score":0.3264999985694885},{"id":"https://openalex.org/C152139883","wikidata":"https://www.wikidata.org/wiki/Q252973","display_name":"Mutual information","level":2,"score":0.3222000002861023},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2867000102996826},{"id":"https://openalex.org/C38764148","wikidata":"https://www.wikidata.org/wiki/Q17098245","display_name":"Interaction information","level":2,"score":0.2824999988079071},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.2809000015258789},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.27300000190734863},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.2612999975681305},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.2567000091075897}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.05520","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.05520","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.05520","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.05520","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7703635692596436,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Sequential":[0],"multi-agent":[1],"large":[2],"language":[3],"model":[4],"(LLM)":[5],"systems":[6,141],"are":[7],"increasingly":[8],"deployed":[9],"in":[10,58,138],"sensitive":[11,38,107],"domains":[12],"such":[13],"as":[14,154],"healthcare,":[15],"finance,":[16],"and":[17,47,69,105,128,149,161],"enterprise":[18],"decision-making,":[19],"where":[20],"multiple":[21],"specialized":[22],"agents":[23,32,83],"collaboratively":[24],"process":[25],"a":[26,71,93,155],"single":[27],"user":[28],"request.":[29],"Although":[30],"individual":[31],"may":[33],"satisfy":[34],"local":[35,146],"privacy":[36,56,137],"constraints,":[37],"information":[39,68,100],"can":[40,80],"still":[41],"be":[42,143,152],"inferred":[43],"through":[44],"sequential":[45,59,85,114],"composition":[46],"intermediate":[48],"representations.":[49],"In":[50],"this":[51,89],"work,":[52],"we":[53,91],"study":[54],"\\emph{compositional":[55],"leakage}":[57],"LLM":[60,140],"agent":[61,103,115],"pipelines.":[62],"We":[63,109],"formalize":[64],"leakage":[65,79],"using":[66],"mutual":[67],"derive":[70],"theoretical":[72],"bound":[73],"that":[74,97,136],"characterizes":[75],"how":[76],"locally":[77],"introduced":[78],"amplify":[81],"across":[82,113],"under":[84],"execution.":[86],"Motivated":[87],"by":[88,145],"analysis,":[90],"propose":[92],"privacy-regularized":[94],"training":[95,160],"framework":[96],"directly":[98],"constrains":[99],"flow":[101],"between":[102],"outputs":[104],"agent-local":[106],"variables.":[108],"evaluate":[110],"our":[111],"approach":[112],"pipelines":[116],"of":[117],"varying":[118],"depth":[119],"on":[120],"three":[121],"benchmark":[122],"datasets,":[123],"demonstrating":[124],"stable":[125],"optimization":[126],"dynamics":[127],"consistent,":[129],"interpretable":[130],"privacy-utility":[131],"trade-offs.":[132],"Our":[133],"results":[134],"show":[135],"agentic":[139],"cannot":[142],"guaranteed":[144],"constraints":[147],"alone":[148],"must":[150],"instead":[151],"treated":[153],"system-level":[156],"property":[157],"during":[158],"both":[159],"deployment.":[162]},"counts_by_year":[],"updated_date":"2026-08-16T07:02:28.622633","created_date":"2026-03-10T00:00:00"}