{"data":{"id":"771ef001-efe9-4dc8-8fbf-d79d6279700b","title":"Cost-Efficient Privacy Enforcement for Email-Generating LLM Agents under Strategic Information Requests","summary":"Researchers propose local contract-conditioned rewriting as an enforcement layer for LLM agents that draft and send emails on a user's behalf. The method builds an information-release contract for each outgoing draft, rewrites it with a local Gemma rewriter, and invokes a final PrivacyChecker selectively. Under normal prompts, leakage falls from 11.41% to 4.03% while UsableRate rises from 85.2% to 92.6%, and under strategic attack prompts checker-only cost amplification drops from 1.32x to 1.02x.","solution":"N/A -- no mitigation discussed in source.","labels":["research","privacy"],"sourceUrl":"https://arxiv.org/abs/2610.18007v1","publishedAt":"2026-10-13T09:06:12.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["pii_leakage"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Google"],"affectedVendorsRaw":["Gemma"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-13T09:06:12.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":"preprint","atlasIds":null}}