Newest papers

Contextual Candour: Role-Aware Graduated Disclosure for LLMs over Mixed-Sensitivity Contexts

Devansh Srivastav, David Pape, Samira Abedini, Lea Schönherr · 2026 · arXiv (Cornell University)

DOI: 10.48550/arxiv.2610.28067 · cited by 0 works (OpenAlex) · open-access PDF

Japanese

既存のアプローチは、アクセス制御をバイナリの決定として実施する:完全に回答するか拒否するか、アクセスが許可された場合にどの程度またはどのような種類の情報が開示されるかを規制することなく、公的または意図せぬ漏洩を引き起こす情報の範囲内で推論する必要があります。私たちは、アクセス制御のレベルと敏感性のレベルがユーザーの許可にカリブレートされ、認可または拒否された決定として扱われるのではなく、アクセスが許可される場合に何種類の情報が開示されるかを規制します。私たちは、開示意識の生成問題としての段階的な開示をモデルし、報酬ベースの最適化フレームワークを導入し、レベルの適切な抽象化に対する応答を形

Machine translation (Meta M2M100); the English original follows.

Abstract

LLMs increasingly operate over mixed-sensitivity contexts, where they must reason over information ranging from public to confidential while disclosing only what the user is authorised to receive. Existing approaches enforce access control as a binary decision: either fully answering or refusing, without regulating how much or what kind of information is revealed if access is granted, leading to over-refusal or unintended leakage. We introduce graduated disclosure, an access-control formulation in which the level of detail and sensitivity in a model's response is calibrated to the user's authorisation rather than treated as a grant-or-deny decision. We model graduated disclosure as a disclosure-aware generation problem and propose a reward-based optimisation framework that shapes responses toward level-appropriate abstractions while penalising unauthorised factual leakage, including paraphrases and approximations. We evaluate our approach on enterprise and clinical benchmarks and compare it with prompt-based, gating, and supervised baselines. Experiments show that our method substantially reduces information leakage while preserving correctness and utility. These results suggest that disclosure control must be integrated into the generation process itself to enable secure yet useful LLM deployments.

Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese

Topics: Correctness, Confidentiality, Authorization, Access control, Computer science, Internet privacy

Sources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange