{"id":"https://openalex.org/W7161698569","doi":"https://doi.org/10.48550/arxiv.2605.16630","title":"PrivScope: Task-scoped Disclosure Control for Hybrid Agentic Systems","display_name":"PrivScope: Task-scoped Disclosure Control for Hybrid Agentic Systems","publication_year":2026,"publication_date":"2026-05-15","ids":{"openalex":"https://openalex.org/W7161698569","doi":"https://doi.org/10.48550/arxiv.2605.16630"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.16630","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16630","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.16630","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114996676","display_name":"Shafizur Rahman Seeam","orcid":"https://orcid.org/0000-0003-3350-0047"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Seeam, Shafizur Rahman","raw_affiliation_strings":["Ian"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ian","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136495221","display_name":"Zhengxiong Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Zhengxiong","raw_affiliation_strings":["Ian"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ian","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100762522","display_name":"Zhiyuan Yu","orcid":"https://orcid.org/0009-0001-4494-0833"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu, Zhiyuan","raw_affiliation_strings":["Ian"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ian","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136464702","display_name":"Yimin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yimin","raw_affiliation_strings":["Ian"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ian","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136468530","display_name":"Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5052980369","display_name":"Yidan Hu","orcid":"https://orcid.org/0000-0002-9443-8411"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Yidan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.34049999713897705,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.34049999713897705,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.11550000309944153,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.08410000056028366,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.6832000017166138},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.6603999733924866},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.619700014591217},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.5787000060081482},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5275999903678894},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.5249000191688538},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4787999987602234},{"id":"https://openalex.org/keywords/delegate","display_name":"Delegate","score":0.4657000005245209},{"id":"https://openalex.org/keywords/identifier","display_name":"Identifier","score":0.44929999113082886}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7335000038146973},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.6832000017166138},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.6603999733924866},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.619700014591217},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.5787000060081482},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5275999903678894},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5249000191688538},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4975999891757965},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4787999987602234},{"id":"https://openalex.org/C143273055","wikidata":"https://www.wikidata.org/wiki/Q2382794","display_name":"Delegate","level":2,"score":0.4657000005245209},{"id":"https://openalex.org/C154504017","wikidata":"https://www.wikidata.org/wiki/Q853614","display_name":"Identifier","level":2,"score":0.44929999113082886},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.3776000142097473},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.34060001373291016},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.32829999923706055},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.3068000078201294},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.30390000343322754},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.2994999885559082},{"id":"https://openalex.org/C197115733","wikidata":"https://www.wikidata.org/wiki/Q1003136","display_name":"Forcing (mathematics)","level":2,"score":0.28769999742507935},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.28610000014305115},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.2766999900341034},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.2720000147819519},{"id":"https://openalex.org/C2985963534","wikidata":"https://www.wikidata.org/wiki/Q7603704","display_name":"State information","level":3,"score":0.2702000141143799},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.2653000056743622},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2599000036716461}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.16630","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16630","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.16630","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16630","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Hybrid":[0],"local--cloud":[1],"agents":[2],"enrich":[3],"user":[4],"requests":[5],"with":[6],"context":[7],"from":[8,42,124],"persistent":[9],"working":[10],"state":[11],"before":[12],"delegating":[13],"capability-intensive":[14],"subtasks":[15],"to":[16,58,158,204],"a":[17,77],"cloud":[18,102,155],"language":[19],"model":[20],"(CLM).":[21],"While":[22],"this":[23],"enrichment":[24],"can":[25],"improve":[26],"task":[27,201],"success,":[28],"it":[29],"also":[30],"exposes":[31],"unnecessary":[32],"information":[33,98],"in":[34,51,113],"the":[35,87,101,107,114,125,154,159,164,191,205],"cloud-bound":[36],"payload,":[37],"including":[38],"task-irrelevant":[39],"context,":[40],"carryover":[41],"prior":[43],"workflows,":[44],"and":[45,110,128,132,189,210,220],"overly":[46],"specific":[47],"sensitive":[48,97],"details,":[49],"resulting":[50],"\\emph{over-disclosure}.":[52],"Existing":[53],"solutions":[54],"either":[55],"isolate":[56],"workflows":[57,169],"limit":[59],"cross-workflow":[60],"leakage":[61,177],"or":[62],"apply":[63],"general-purpose":[64],"sanitization":[65],"that":[66,82,151],"does":[67],"not":[68],"reason":[69],"over":[70],"LC-assembled":[71],"payload":[72,80,127],"scope.":[73],"We":[74],"present":[75],"\\textsc{PrivScope},":[76],"trusted":[78],"on-device":[79,225],"governor":[81],"enforces":[83],"\\emph{task-scoped":[84],"disclosure}":[85],"at":[86],"local--CLM":[88],"boundary,":[89],"without":[90],"requiring":[91],"cloud-side":[92],"changes.":[93],"Its":[94],"key":[95],"idea:":[96],"should":[99],"reach":[100,153],"only":[103,112,222],"when":[104],"required":[105],"for":[106,163],"delegated":[108],"subtask,":[109],"then":[111],"least":[115],"revealing":[116],"form":[117],"preserving":[118,200],"utility.":[119],"\\textsc{PrivScope}":[120,174],"extracts":[121],"disclosure":[122],"units":[123,139,150],"assembled":[126],"keeps":[129],"direct":[130],"identifiers":[131],"account-linked":[133],"values":[134],"on":[135,195,208,227],"device.":[136],"The":[137],"remaining":[138],"pass":[140],"through":[141],"cloud-necessity":[142],"control,":[143],"which":[144],"determines":[145],"what":[146],"is":[147],"actually":[148],"needed;":[149],"must":[152],"are":[156],"abstracted":[157],"least-specific":[160],"representation":[161],"sufficient":[162],"task.":[165],"On":[166],"100":[167],"medical-booking":[168],"across":[170,216],"three":[171],"commercial":[172],"CLMs,":[173],"eliminates":[175],"profile":[176],"(0.0\\%":[178],"vs.\\":[179,187],"17.7\\%),":[180],"more":[181],"than":[182],"halves":[183],"attacker":[184],"re-identification":[185],"(23.1\\%":[186],"64.3\\%),":[188],"achieves":[190],"highest":[192],"candidate":[193],"recall":[194],"every":[196],"CLM":[197],"tested":[198],"while":[199],"success":[202],"close":[203],"unprotected":[206],"baseline":[207],"GPT-4o-mini":[209],"Gemini":[211],"2.5":[212],"Flash.":[213],"Gains":[214],"hold":[215],"five":[217],"local":[218],"backbones":[219],"add":[221],"seconds":[223],"of":[224],"latency":[226],"commodity":[228],"hardware.":[229]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-20T00:00:00"}