When Safety Checks Become Privacy Risks: A Privacy-Preserving Paradigm for LLM Agent Safety Auditing
The paper proposes a privacy-preserving paradigm for safety auditing of LLM agents, separating audit computation from plaintext access and execution authority. It introduces SealCall, a framework combining learned audit representations with CKKS-based encrypted similarity computation, achieving a mean F1 score of 0.840 on 1,252 public binary candidates. Encrypted scoring completes in 0.176 seconds per operation, preserving plaintext audit decisions in all measured cases. This addresses the risk of exposing sensitive user data during external safety checks.
Why it matters: Offers a concrete, evaluated solution to a critical privacy issue in LLM agent auditing, with measurable performance metrics.