CalBench: Evaluating Coordination-Privacy Trade-offs in Multi-Agent LLMs
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Personal AI assistants are beginning to act as delegates with access to calendars, inboxes, and user preferences. Calendar scheduling makes the trust problem concrete: an assistant must coordinate with other assistants while deciding what to reveal about the person it represents. We introduce CalBench, a controlled benchmark for multi-agent calendar scheduling under private information. In each task, N agents manage separate private calendars and schedule a stream of M incoming meetings while minimizing disruption costs. Because no agent can inspect another agent's calendar, success requires language-mediated coordination rather than centralized planning. CalBench generates solvable scenarios with CP-SAT oracle solutions and decentralized non-LLM reference protocols, enabling evaluation of task success, excess cost, communication efficiency, burden fairness, and privacy leakage under matched information constraints. Across seven model families, we find that completion alone misses important failures: agents leave avoidable cost on the table, communication volume does not predict lower regret, and privacy-preserving silence can deprive teammates of cost information needed for fair burden allocation. CalBench provides a reproducible testbed for studying whether autonomous assistants can coordinate on behalf of users before deployment at scale.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 16 of its 63 references that are in the map. First posted on arXiv 10 May 2026.
Builds on
16 of 63 references.
Closest ancestors · 2
Same direction, newest first
- 2025MAGPIE: A dataset for Multi-AGent contextual PrIvacy Evaluation25 Jun
- 2024AirGapAgent: Protecting Privacy-Conscious Conversational Agents8 May
Other references · 14
- 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domainscited by 1,402
- 2025τ2-Bench: Evaluating Conversational Agents in a Dual-Control Environmentcited by 627
- 2023SOTOPIA: Interactive Evaluation for Social Intelligence in Language Agentscited by 367
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
- 2017Deal or No Deal? End-to-End Learning for Negotiation Dialoguescited by 209
- 2025MultiAgentBench: Evaluating the Collaboration and Competition of LLM agentscited by 178
- 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 171
- 2024NATURAL PLAN: Benchmarking LLMs on Natural Language Planningcited by 128
- 2024How Well Can LLMs Negotiate? NegotiationArena Platform and Analysiscited by 100
- 2023Cooperation, Competition, and Maliciousness: LLM-Stakeholders Interactive Negotiationcited by 96
- 2026CooperBench: Why Coding Agents Cannot be Your Teammates Yetcited by 23
- 2024OpenSkill: A faster asymmetric multi-team, multiplayer rating systemcited by 9
Built on by
Citing papers per year: 2026: 7.
7 papers.
- 2026Graph Engineering in the Era of LLM Agents: From Individual Intelligence to System Intelligencecited by 3
- 2026PiSAs: Benchmarking Contextual Integrity in Multi-User Agentic Systemscited by 2
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systemscited by 1
- 2026Selection-Invariant Communication Compilers for Privacy-Aware Multi-Agent LLM Workflowscited by 1
- 2026MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communicationcited by 0
- 2026From Passive Delegates to Strategic Negotiators: Reinforcing Social Reasoning in Small Language Models with SocialRLcited by 0
- 2026Worse Together: How Performance Breaks Down in Multi-User Multi-Agent Teamscited by 0
- 2026Worse Together: How Performance Breaks Down in Multi-User Multi-Agent Teams30 Sep 2026
- 2026SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems1 Sep 2026
- 2026Graph Engineering in the Era of LLM Agents: From Individual Intelligence to System Intelligence21 Aug 2026
- 2026From Passive Delegates to Strategic Negotiators: Reinforcing Social Reasoning in Small Language Models with SocialRL13 Aug 2026
- 2026Selection-Invariant Communication Compilers for Privacy-Aware Multi-Agent LLM Workflows4 Aug 2026
- 2026MNC: Scope-Bound Semantic Declassification for Private LLM-Agent Communication3 Aug 2026
- 2026PiSAs: Benchmarking Contextual Integrity in Multi-User Agentic Systems6 Jul 2026
Similar, not cited
Close in wording, no citation either way
- 2026PrivacyAlign: Contextual Privacy Alignment for LLM Agents
- 2026AgentLeak: A Benchmark for Internal-Channel Privacy Leakage in Multi-Agent LLM Systems
- 2026Got a Secret? LLM Agents Can't Keep It: Evaluating Privacy in Multi-Agent Systems
- 2026SOTOPIA-TOM: Evaluating Privacy and Information Management in Multi-Agent Interaction with Theory of Mind
- 2026AgentPrivArena: Evaluating and Auditing Real-world AI Agent Privacy
- 2024Privacy Leakage Overshadowed by Views of AI: A Study on Human Oversight of Privacy in Language Model Agent
- 2026Differential Privacy in Generative AI Agents: Analysis and Optimal Tradeoffs
- 2026MuPPET: A Benchmark for Contextual Privacy of LLM Assistants in Multi-Party Conversations