[2603.04902] AgentSCOPE: Evaluating Contextual Privacy Across Agentic Workflows

Computer Science > Cryptography and Security arXiv:2603.04902 (cs) [Submitted on 5 Mar 2026] Title:AgentSCOPE: Evaluating Contextual Privacy Across Agentic Workflows Authors:Ivoline C. Ngong, Keerthiram Murugesan, Swanand Kadhe, Justin D. Weisz, Amit Dhurandhar, Karthikeyan Natesan Ramamurthy View a PDF of the paper titled AgentSCOPE: Evaluating Contextual Privacy Across Agentic Workflows, by Ivoline C. Ngong and 5 other authors View PDF HTML (experimental) Abstract:Agentic systems are increasingly acting on users' behalf, accessing calendars, email, and personal files to complete everyday tasks. Privacy evaluation for these systems has focused on the input and output boundaries, but each task involves several intermediate information flows, from agent queries to tool responses, that are not currently evaluated. We argue that every boundary in an agentic pipeline is a site of potential privacy violation and must be assessed independently. To support this, we introduce the Privacy Flow Graph, a Contextual Integrity-grounded framework that decomposes agentic execution into a sequence of information flows, each annotated with the five CI parameters, and traces violations to their point of origin. We present AgentSCOPE, a benchmark of 62 multi-tool scenarios across eight regulatory domains with ground truth at every pipeline stage. Our evaluation across seven state-of-the-art LLMs show that privacy violations in the pipeline occur in over 80% of scenarios, even when final outp...