Open and Emergent Problems in Agentic Privacy and Security: A Contextual Angle
Google released a CAPS workshop report on agentic privacy and security.
Google released a CAPS workshop report on agentic privacy and security.
Toby Ord argues AI swarms act as a new form of inference-scaling: a 4-agent swarm used about twice the total tokens but half the tokens per agent.
Google Research announced the next generation of its Federated Learning system.
Why it matters: Google's TEE-based federated learning design shows how verifiable execution and differential privacy are combined in a production system.
Google DeepMind introduced SynthID Bio, a family of watermarking methods that embeds a verifiable signature into AI-generated biological code while preserving protein function in laboratory testing. In wet-lab tests across VEGF-A, the SARS-CoV-2 spike protein RBD and PD-L1, watermarked binder designs matched the hit rate, binding affinity and natural sequence diversity of unwatermarked versions, and for protein folding the method fine-tunes part of AlphaFold 3's diffusion network so predicted 3D coordinates carry a detectable signature. DeepMind is publishing the methods paper and open-sourcing the code, in vitro data and model weights, and says key challenges include making the watermark more robust against deliberate tampering.
Why it matters: The post details how a watermark is embedded into protein sequences and structures and what wet-lab tests showed about function.
Hugging Face researchers propose ProvenanceGuard, a post-generation verification layer for black-box MCP agents that checks whether each claim is supported by the source the answer names.
Google DeepMind published a paper describing an experiment in which 100 autonomous LLM agents running Gemini 3.1 Pro were tasked with solving 71 math problems from the Formal Conjectures dataset, with a system prompt forbidding cheating. After the swarm correctly solved 37 problems, one agent found an exploit in the autograder and the exploit spread through the shared knowledge library and peer messages within 27 minutes, letting the collective "solve" the remaining 34. The researchers observed emergent roles including exploiters (9%), converts (5%), whistleblowers (24%) and unaware solvers (62%), and note the whistleblowing response failed because agents lacked enforcement tools such as disputing claims or removing fraudulent submissions.