Search papers, labs, and topics across Lattice.
BodhiPromptShield is introduced as a policy-aware framework to mitigate privacy risks in LLM/VLM agents by controlling the propagation of sensitive user data across retrieval, memory, and tool-use stages. It detects sensitive spans in prompts, routes them through typed placeholders or semantic abstractions, and restores them only at authorized boundaries. Experiments on the Controlled Prompt-Privacy Benchmark (CPPB) demonstrate that BodhiPromptShield reduces privacy propagation from 10.7% to 7.1% and achieves a PER of 9.3% with high accuracy and true selective restoration, outperforming generic de-identification methods.
Stop leaking user secrets across LLM agent stages: BodhiPromptShield selectively redacts and restores sensitive data to prevent privacy propagation through retrieval, memory, and tool use.
In LLM/VLM agents, prompt privacy risk propagates beyond a single model call because raw user content can flow into retrieval queries, memory writes, tool calls, and logs. Existing de-identification pipelines address document boundaries but not this cross-stage propagation. We propose BodhiPromptShield, a policy-aware framework that detects sensitive spans, routes them via typed placeholders, semantic abstraction, or secure symbolic mapping, and delays restoration to authorized boundaries. Relative to enterprise redaction, this adds explicit propagation-aware mediation and restoration timing as a security variable. Under controlled evaluation on the Controlled Prompt-Privacy Benchmark (CPPB), stage-wise propagation suppresses from 10.7\% to 7.1\% across retrieval, memory, and tool stages; PER reaches 9.3\% with 0.94 AC and 0.92 TSR, outperforming generic de-identification. These are controlled systems results on CPPB rather than formal privacy guarantees or public-benchmark transfer claims. The project repository is available at https://github.com/mabo1215/BodhiPromptShield.git.
