{"id":"https://openalex.org/W7163694979","doi":"https://doi.org/10.48550/arxiv.2606.05679","title":"Data Flow Control: Data Safety Policies for AI Agents","display_name":"Data Flow Control: Data Safety Policies for AI Agents","publication_year":2026,"publication_date":"2026-06-04","ids":{"openalex":"https://openalex.org/W7163694979","doi":"https://doi.org/10.48550/arxiv.2606.05679"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.05679","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.05679","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.05679","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137951656","display_name":"Charlie Summers","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Summers, Charlie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5130168638","display_name":"Wu, Eugene, Ph. D. Massachusetts Institute of Technology","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Eugene","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9848999977111816,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9848999977111816,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11937","display_name":"Research Data Management Practices","score":0.0032999999821186066,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10715","display_name":"Distributed and Parallel Computing Systems","score":0.00139999995008111,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.6484000086784363},{"id":"https://openalex.org/keywords/data-flow-diagram","display_name":"Data flow diagram","score":0.5020999908447266},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.4950000047683716},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4758000075817108},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.44690001010894775},{"id":"https://openalex.org/keywords/query-language","display_name":"Query language","score":0.44040000438690186},{"id":"https://openalex.org/keywords/undo","display_name":"Undo","score":0.4318999946117401},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.423799991607666},{"id":"https://openalex.org/keywords/data-warehouse","display_name":"Data warehouse","score":0.40149998664855957},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.3905999958515167}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8500000238418579},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.6484000086784363},{"id":"https://openalex.org/C489000","wikidata":"https://www.wikidata.org/wiki/Q747385","display_name":"Data flow diagram","level":2,"score":0.5020999908447266},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.4950000047683716},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.4900999963283539},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4758000075817108},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.44690001010894775},{"id":"https://openalex.org/C192028432","wikidata":"https://www.wikidata.org/wiki/Q845739","display_name":"Query language","level":2,"score":0.44040000438690186},{"id":"https://openalex.org/C2780154230","wikidata":"https://www.wikidata.org/wiki/Q513420","display_name":"Undo","level":2,"score":0.4318999946117401},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.423799991607666},{"id":"https://openalex.org/C135572916","wikidata":"https://www.wikidata.org/wiki/Q193351","display_name":"Data warehouse","level":2,"score":0.40149998664855957},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3905999958515167},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.3767000138759613},{"id":"https://openalex.org/C154690210","wikidata":"https://www.wikidata.org/wiki/Q1668499","display_name":"Rewriting","level":2,"score":0.3668000102043152},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.352400004863739},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.35100001096725464},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.3483000099658966},{"id":"https://openalex.org/C4679612","wikidata":"https://www.wikidata.org/wiki/Q866298","display_name":"Aggregate (composite)","level":2,"score":0.33899998664855957},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3384999930858612},{"id":"https://openalex.org/C88468194","wikidata":"https://www.wikidata.org/wiki/Q1172416","display_name":"Data-flow analysis","level":3,"score":0.3337000012397766},{"id":"https://openalex.org/C100463513","wikidata":"https://www.wikidata.org/wiki/Q5227322","display_name":"Data model (GIS)","level":2,"score":0.32749998569488525},{"id":"https://openalex.org/C2985179714","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Work flow","level":2,"score":0.31709998846054077},{"id":"https://openalex.org/C1668388","wikidata":"https://www.wikidata.org/wiki/Q1149776","display_name":"Data management","level":2,"score":0.3102000057697296},{"id":"https://openalex.org/C98199447","wikidata":"https://www.wikidata.org/wiki/Q2445044","display_name":"Materialized view","level":4,"score":0.3052999973297119},{"id":"https://openalex.org/C54239708","wikidata":"https://www.wikidata.org/wiki/Q1329910","display_name":"View","level":3,"score":0.3012999892234802},{"id":"https://openalex.org/C2778058735","wikidata":"https://www.wikidata.org/wiki/Q4692253","display_name":"Aggregate data","level":2,"score":0.2953999936580658},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.29179999232292175},{"id":"https://openalex.org/C162319229","wikidata":"https://www.wikidata.org/wiki/Q175263","display_name":"Data structure","level":2,"score":0.2867000102996826},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.28060001134872437},{"id":"https://openalex.org/C2778180026","wikidata":"https://www.wikidata.org/wiki/Q18378163","display_name":"Semantic heterogeneity","level":4,"score":0.27869999408721924},{"id":"https://openalex.org/C157692150","wikidata":"https://www.wikidata.org/wiki/Q2919848","display_name":"Query optimization","level":2,"score":0.27489998936653137},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.27160000801086426},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.267300009727478},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.26019999384880066},{"id":"https://openalex.org/C69075417","wikidata":"https://www.wikidata.org/wiki/Q515701","display_name":"Linked data","level":3,"score":0.25859999656677246},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.25859999656677246},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2547999918460846},{"id":"https://openalex.org/C56288433","wikidata":"https://www.wikidata.org/wiki/Q58673","display_name":"Data manipulation language","level":2,"score":0.251800000667572}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.05679","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.05679","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.05679","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.05679","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.616584837436676,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Agents":[0],"increasingly":[1],"generate":[2],"SQL,":[3],"orchestrate":[4],"pipelines,":[5],"and":[6,44,70,109,133,140,163],"automate":[7],"data":[8,40,55,76,101,159,168],"analysis":[9],"on":[10],"behalf":[11],"of":[12,145],"users.":[13],"While":[14],"recent":[15],"work":[16],"improves":[17],"query":[18,25,114],"correctness,":[19],"correctness":[20],"is":[21,52,85,91,153,173],"not":[22],"safety.":[23],"A":[24,82],"may":[26,41],"be":[27,42],"semantically":[28],"valid":[29],"yet":[30,93],"violate":[31],"regulatory,":[32],"privacy,":[33],"or":[34],"business":[35],"constraints":[36,51],"that":[37,48,90,117],"govern":[38],"how":[39],"combined":[43],"released.":[45],"We":[46,99],"argue":[47],"enforcing":[49],"such":[50],"fundamentally":[53],"a":[54,65,79,87,112,148],"infrastructure":[56],"problem.":[57],"This":[58],"paper":[59],"introduces":[60],"Data":[61,150,170],"Flow":[62,151,171],"Control":[63,152,172],"(DFC),":[64],"framework":[66],"to":[67,95],"declaratively":[68],"specify":[69],"guarantee":[71],"policy":[72,88],"enforcement":[73],"over":[74,106],"tuple-level":[75],"flows":[77],"within":[78],"DBMS":[80,126],"query.":[81],"key":[83],"challenge":[84],"defining":[86],"language":[89],"optimizer-invariant":[92],"efficient":[94],"enforce":[96],"at":[97,177],"scale.":[98],"formalize":[100],"safety":[102,160],"as":[103],"aggregate":[104],"predicates":[105],"provenance":[107],"monomials":[108],"present":[110],"Passant,":[111],"portable":[113],"rewriting":[115],"layer":[116],"enforces":[118],"DFC":[119],"policies":[120],"without":[121],"materializing":[122],"provenance.":[123],"Across":[124],"five":[125],"engines":[127],"--":[128,135],"DuckDB,":[129],"Umbra,":[130],"PostgreSQL,":[131],"DataFusion,":[132],"SQLServer":[134],"Passant":[136],"achieves":[137],"~0%":[138],"overhead":[139],"outperforms":[141],"alternatives":[142],"by":[143],"orders":[144],"magnitude.":[146],"As":[147],"result,":[149],"the":[154,167],"first":[155],"step":[156],"towards":[157],"moving":[158],"from":[161],"prompts":[162],"post-hoc":[164],"checks":[165],"into":[166],"infrastructure.":[169],"available":[174],"open":[175],"source":[176],"https://github.com/dataflowcontrol/data-flow-control.":[178]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-06T00:00:00"}