mlsanityData to 14 Oct 2026

Personalizing Agent Privacy Decisions via Logical Entailment

arXiv 2512.05065 ↗First posted 4 Dec 2025cs.CRcited by 4

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

Personal large language model (LLM) agents increasingly perform tasks that require access to user data, raising concerns about appropriate data disclosure. We show that relying solely on LLMs to make data-sharing decisions is insufficient. Prompting LLMs with general privacy norms fails to capture individual users' privacy preferences, while providing prior user data-sharing decisions through in-context learning (ICL) leads to unreliable and opaque reasoning. To address these limitations, we propose ARIEL (Agentic Reasoning with Individualized Entailment Logic), a framework that combines LLMs with rule-based logic to enable structured, personalized privacy reasoning. The core mechanism of ARIEL determines whether a user's prior decision on a data-sharing request textitlogically entails the same decision for a new request. Experimental evaluations using advanced models and public datasets show that ARIEL reduces the F1 error rate for appropriate judgments by 40.6% compared to standard ICL-based reasoning, indicating that ARIEL is effective at correctly judging requests where the user would approve data sharing. These results demonstrate that integrating LLMs with logical entailment provides an effective and interpretable approach for automating personalized privacy decisions.

Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 32 of its 103 references that are in the map. First posted on arXiv 4 Dec 2025.

Builds on

32 of 103 references.

Closest ancestors · 1

Same direction, newest first

  1. 2025Protecting Users From Themselves: Safeguarding Contextual Privacy in Interactions with Conversational Agents22 Feb

Other references · 31

  1. 2020Language Models are Few-Shot Learnerscited by 32,419
  2. 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
  3. 2025Gemma 3 Technical Reportcited by 1,824
  4. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
  5. 2025A-MEM: Agentic Memory for LLM Agentscited by 1,063
  6. 2025Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memorycited by 779
  7. 2023Logic-LM: Empowering Large Language Models with Symbolic Solvers for Faithful Logical Reasoningcited by 391
  8. 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
  9. 2025ZebraLogic: On the Scaling Limits of LLMs for Logical Reasoningcited by 201
  10. 2024Don't Hallucinate, Abstain: Identifying LLM Knowledge Gaps via Multi-LLM Collaborationcited by 180
  11. 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 171
  12. 2022The Unreliability of Explanations in Few-shot Prompting for Textual Reasoningcited by 169
19 more
  1. 2023LINC: A Neurosymbolic Approach for Logical Reasoning by Combining Language Models with First-Order Logic Proverscited by 168
  2. 2025AbstentionBench: Reasoning LLMs Fail on Unanswerable Questionscited by 145
  3. 2023SatLM: Satisfiability-Aided Language Models Using Declarative Promptingcited by 102
  4. 2025Contextual Agent Security: A Policy for Every Purposecited by 59
  5. 2025Fully Autonomous AI Agents Should Not be Developedcited by 45
  6. 2024GoldCoin: Grounding Large Language Models in Privacy Laws via Contextual Integrity Theorycited by 37
  7. 2024Operationalizing Contextual Integrity in Privacy-Conscious Assistantscited by 37
  8. 2024CI-Bench: Benchmarking Contextual Integrity of AI Assistants on Synthetic Datacited by 37
  9. 2025PrivaCI-Bench: Evaluating Privacy with Contextual Integrity and Legal Compliancecited by 37
  10. 2025CIMemories: A Compositional Benchmark for Contextual Integrity of Persistent Memory in LLMscited by 26
  11. 2025Towards Automating Data Access Permissions in AI Agentscited by 21
  12. 2018Discovering Smart Home Internet of Things Privacy Norms Using Contextual Integritycited by 11
  13. 2017The Feasibility of Dynamically Granted Permissions: Aligning Mobile Privacy with User Preferencescited by 9
  14. 2025Understanding Privacy Norms Around LLM-Based Chatbots: A Contextual Integrity Perspectivecited by 7
  15. 2019Evaluating the Contextual Integrity of Privacy Regulation: Parents' IoT Toy Privacy Norms Versus COPPAcited by 4
  16. 2025Benchmarking LLM Privacy Recognition for Social Robot Decision Makingcited by 4
  17. 2025Towards Aligning Personalized Conversational Recommendation Agents with Users' Privacy Preferencescited by 4
  18. 2025Can LLMs Make (Personalized) Access Control Decisions?cited by 4
  19. 2025It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharingcited by 3

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 4.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 20251-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoning
  2. 2026Personalized Privacy Control in LLMs via Attention Head Intervention
  3. 2025Leaky Thoughts: Large Reasoning Models Are Not Private Thinkers
  4. 2026Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents
  5. 2024Empowering Users in Digital Privacy Management through Interactive LLM-Based Agents
  6. 2026PrivacyAlign: Contextual Privacy Alignment for LLM Agents
  7. 2025Privacy Reasoning in Ambiguous Contexts
  8. 2026PrivAct: Internalizing Contextual Privacy Preservation via Multi-Agent Preference Training