---
type: "post"
id: "open-and-emergent-problems-in-agentic-privacy-and-9c885b"
slug: "open-and-emergent-problems-in-agentic-privacy-and-9c885b"
title: "Open and Emergent Problems in Agentic Privacy and Security: A Contextual Angle"
description: "**Thesis:** Agent privacy and security depend on whether information flows and actions are appropriate in a specific context, not only on secrecy or static permissions."
retrieval_nugget: "**Thesis:** Agent privacy and security depend on whether information flows and actions are appropriate in a specific context, not only on secrecy or static permissions."
published_at: "2026-10-10"
updated_at: "2026-10-10"
record_date: "2026-10-10"
date_kind: "published_at"
topics: ["google"]
source_urls: ["https://research.google/blog/open-and-emergent-problems-in-agentic-privacy-and-security-a-contextual-angle"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:open-and-emergent-problems-in-agentic-privacy-and-9c885b"
status: "published"
visuals: []
editorial_provenance: {"schema_version":"newruntime-editorial-copy-v1","content_status":"source_grounded_final","final_copy_sha256":"sha256:5af7b06c8acde82e4a9ff1f987cecf86b5d9db39ed58cdc542389777282326b0","reviewed_at":"2026-10-10T09:04:10.120Z","source_evidence_count":1,"verified_claim_count":2,"site_analysis_schema_version":"newruntime-site-analysis-v1","site_object_kind":"field_note","observed_fact_count":2,"implication_count":1,"watch_condition_count":1,"related_record_count":0}
analysis: {"schema_version":"newruntime-site-analysis-v1","object_kind":"field_note","thesis":"Agent privacy and security depend on whether information flows and actions are appropriate in a specific context, not only on secrecy or static permissions.","observed_facts":[{"text":"Google Research says the report resulted from a workshop involving more than 50 academic and industry leaders.","source_urls":["https://research.google/blog/open-and-emergent-problems-in-agentic-privacy-and-security-a-contextual-angle"]},{"text":"It names unstructured inputs, probabilistic control flows, and autonomy with delegation as three characteristics that complicate traditional security methods.","source_urls":["https://research.google/blog/open-and-emergent-problems-in-agentic-privacy-and-security-a-contextual-angle"]}],"mechanism":"Contextual Integrity describes privacy in terms of appropriate information flows, characterized by actors, information types, and transmission principles. The report extends that framing to agent actions and asks how systems can evaluate contextual appropriateness before execution.","why_now":"Agents increasingly plan, invoke tools, and handle multi-step tasks, while user oversight becomes less effective as tasks lengthen or are delegated.","implications":["Safeguards may need to translate high-level, context-specific norms into constraints that apply to particular data flows and actions, rather than relying only on broad permissions."],"evidence_boundary":"This is a workshop report outlining open problems; the source does not establish that a working implementation has solved contextual reasoning or prevents harmful behavior.","watch_conditions":["Watch for evaluated methods that convert contextual norms into enforceable policies and test them across different agents, tools, and settings."],"related_records":[],"new_branch_reason":"No prior New Runtime record was supplied; this report establishes a distinct research framing that extends contextual privacy norms to agent actions."}
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/posts/open-and-emergent-problems-in-agentic-privacy-and-9c885b/","markdown":"https://newruntime.com/posts/open-and-emergent-problems-in-agentic-privacy-and-9c885b.md","json":"https://newruntime.com/posts/open-and-emergent-problems-in-agentic-privacy-and-9c885b.json"}
---

# Open and Emergent Problems in Agentic Privacy and Security: A Contextual Angle

## Retrieval answer

**Thesis:** Agent privacy and security depend on whether information flows and actions are appropriate in a specific context, not only on secrecy or static permissions.

**Thesis:** Agent privacy and security depend on whether information flows and actions are appropriate in a specific context, not only on secrecy or static permissions. Google Research’s workshop report makes this case through Contextual Integrity and identifies research questions rather than presenting a finished safeguard.

**Observed facts:** Google Research says the report resulted from a workshop involving more than 50 academic and industry leaders. It names unstructured inputs, probabilistic control flows, and autonomy with delegation as three characteristics that complicate traditional security methods. **Mechanism:** Contextual Integrity describes privacy in terms of appropriate information flows, characterized by actors, information types, and transmission principles. The report extends that framing to agent actions and asks how systems can evaluate contextual appropriateness before execution. **Why now:** Agents increasingly plan, invoke tools, and handle multi-step tasks, while user oversight becomes less effective as tasks lengthen or are delegated.

**First implication:** Safeguards may need to translate high-level, context-specific norms into constraints that apply to particular data flows and actions, rather than relying only on broad permissions. **Evidence boundary:** This is a workshop report outlining open problems; the source does not establish that a working implementation has solved contextual reasoning or prevents harmful behavior. **First watch condition:** Watch for evaluated methods that convert contextual norms into enforceable policies and test them across different agents, tools, and settings. The report’s system-, model-, user-, and ecosystem-level framing is a research agenda; practical value will depend on whether these layers can be specified and tested together.

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Google](https://newruntime.com/topics/google.md): Explore the google topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)