{"data":{"id":"c8d60dbc-3291-4bb3-942a-c30c163529cb","title":"Enforcing Accountable Disclosure in Confidential AI","summary":"CORDE is a system for confidential virtual machines that confines user-derived data by default and allows it to leave only after it is declared. A declaration records the exact contents, recipient and stated reason in a tamper-evident log that users can access. The authors combine per-user information-flow control in Rust with a TEE-based ledger and remote attestation. On an NVIDIA H100 GPU, declaring before disclosure adds about 0.5% task latency on the AppWorld agent benchmark.","solution":"N/A -- no mitigation discussed in source.","labels":["privacy","research"],"sourceUrl":"https://arxiv.org/abs/2611.05971v1","publishedAt":"2026-11-04T05:05:43.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["NVIDIA"],"affectedVendorsRaw":["NVIDIA H100","AppWorld agent benchmark"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-04T05:05:43.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":"preprint","atlasIds":null}}