{"type":"post","id":"open-and-emergent-problems-in-agentic-privacy-and-9c885b","slug":"open-and-emergent-problems-in-agentic-privacy-and-9c885b","title":"Open and Emergent Problems in Agentic Privacy and Security: A Contextual Angle","description":"**Thesis:** Agent privacy and security depend on whether information flows and actions are appropriate in a specific context, not only on secrecy or static permissions.","retrieval_nugget":"**Thesis:** Agent privacy and security depend on whether information flows and actions are appropriate in a specific context, not only on secrecy or static permissions.","published_at":"2026-10-10","updated_at":"2026-10-10","record_date":"2026-10-10","date_kind":"published_at","topics":["google"],"source_urls":["https://research.google/blog/open-and-emergent-problems-in-agentic-privacy-and-security-a-contextual-angle"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:open-and-emergent-problems-in-agentic-privacy-and-9c885b","status":"published","visuals":[],"editorial_provenance":{"schema_version":"newruntime-editorial-copy-v1","content_status":"source_grounded_final","final_copy_sha256":"sha256:5af7b06c8acde82e4a9ff1f987cecf86b5d9db39ed58cdc542389777282326b0","reviewed_at":"2026-10-10T09:04:10.120Z","source_evidence_count":1,"verified_claim_count":2,"site_analysis_schema_version":"newruntime-site-analysis-v1","site_object_kind":"field_note","observed_fact_count":2,"implication_count":1,"watch_condition_count":1,"related_record_count":0},"analysis":{"schema_version":"newruntime-site-analysis-v1","object_kind":"field_note","thesis":"Agent privacy and security depend on whether information flows and actions are appropriate in a specific context, not only on secrecy or static permissions.","observed_facts":[{"text":"Google Research says the report resulted from a workshop involving more than 50 academic and industry leaders.","source_urls":["https://research.google/blog/open-and-emergent-problems-in-agentic-privacy-and-security-a-contextual-angle"]},{"text":"It names unstructured inputs, probabilistic control flows, and autonomy with delegation as three characteristics that complicate traditional security methods.","source_urls":["https://research.google/blog/open-and-emergent-problems-in-agentic-privacy-and-security-a-contextual-angle"]}],"mechanism":"Contextual Integrity describes privacy in terms of appropriate information flows, characterized by actors, information types, and transmission principles. The report extends that framing to agent actions and asks how systems can evaluate contextual appropriateness before execution.","why_now":"Agents increasingly plan, invoke tools, and handle multi-step tasks, while user oversight becomes less effective as tasks lengthen or are delegated.","implications":["Safeguards may need to translate high-level, context-specific norms into constraints that apply to particular data flows and actions, rather than relying only on broad permissions."],"evidence_boundary":"This is a workshop report outlining open problems; the source does not establish that a working implementation has solved contextual reasoning or prevents harmful behavior.","watch_conditions":["Watch for evaluated methods that convert contextual norms into enforceable policies and test them across different agents, tools, and settings."],"related_records":[],"new_branch_reason":"No prior New Runtime record was supplied; this report establishes a distinct research framing that extends contextual privacy norms to agent actions."},"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/open-and-emergent-problems-in-agentic-privacy-and-9c885b/","markdown":"https://newruntime.com/posts/open-and-emergent-problems-in-agentic-privacy-and-9c885b.md","json":"https://newruntime.com/posts/open-and-emergent-problems-in-agentic-privacy-and-9c885b.json"},"next_reads":[{"type":"topic","path":"/topics/google/","url":"https://newruntime.com/topics/google/","title":"Google","reason":"Explore the google topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/google.md","json_url":"https://newruntime.com/topics/google.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}