Homomorphic Advantage Operator: Stabilizing Reinforcement Learning Under Fully Homomorphic Encryption Constraints
Not on the map. Why?
Abstract (arXiv)
Privacy-preserving machine learning presents significant deployment challenges on the cloud for intelligent systems with confidential data. Fully Homomorphic Encryption (FHE) offers a compelling solution for secure computation, preserving data confidentiality of cloud computations. However, applying FHE to reinforcement learning (RL) requires replacing non-linear operations with polynomial approximations, which diverge catastrophically due to a unique recursive error phenomenon known as the Bellman drift. This article introduces the Homomorphic Advantage Operator (HAO), a stabilization framework designed to prevent polynomial approximation divergence in FHE-based deep RL. HAO adapts the zero-mean centering projection from advantage-based value estimation directly to temporal-difference (TD) targets. This linear projection annihilates the uniform state-value baseline that drives the Bellman drift, maintaining per-state action rankings while requiring zero additional non-linear multiplicative depth and avoiding expensive ciphertext bootstrapping. The proposed HAO framework was evaluated using a three-tier experimental methodology, including a tabular Markov Decision Process (MDP), an encrypted CartPole environment using real CKKS cryptographic operations, and a 20-node logistics routing benchmark with dense continuous features. The results demonstrate that the proposed HAO strictly bounds network pre-activations within the safe polynomial approximation domain. The proposed HAO RL agents achieved 0% boundary breaches across all random seeds used, whereas regularization alone (L2 weight decay and gradient clipping) breached the bound on 3 of 5 seeds and the unstabilized baseline did so in 83.8% of episodes. Finally, HAO agents improve optimal policy accuracy by 18.0 percentage points in tabular domains and remain stable when DP-SGD-style Gaussian noise is added to the clipped gradients.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 11 of its 29 references that are in the map. First posted on arXiv 1 Oct 2026.
Builds on
11 of 29 references.
References · 11
- 2016Deep Learning with Differential Privacycited by 2,682
- 2019Deep Leakage from Gradientscited by 1,004
- 2015Dueling Network Architectures for Deep Reinforcement Learningcited by 769
- 2018Gazelle: A Low Latency Framework for Secure Neural Network Inferencecited by 193
- 2016Learning values across many orders of magnitudecited by 80
- 2021Return-based Scaling: Yet Another Normalisation Trick for Deep RLcited by 22
- 2021A methodology for training homomorphicencryption friendly neural networkscited by 10
- 2025A Training Framework for Optimal and Stable Training of Polynomial Neural Networkscited by 2
- 2021Reinforcement Learning on Encrypted Datacited by 1
- 2025ReBoot: Encrypted Training of Deep Neural Networks with CKKS Bootstrappingcited by 1
- 2026CHEHAB RL: Learning to Optimize Fully Homomorphic Encryption Computationscited by 1
Built on by
Not cited yet.