Search papers, labs, and topics across Lattice.
SlotGuard addresses the critical issue of privacy leakage in LLM agents by implementing a local transcript boundary that conceals sensitive data while maintaining performance. The method employs typed, suffix-aware slots to replace secrets with synthetic values and utilizes a lightweight session graph to manage cross-turn references, achieving a 0.0% credential leakage rate across 852 planted values. In controlled tests, SlotGuard effectively removed all 20,814 annotated structurally sensitive characters without significantly impacting task success rates compared to raw transcripts, while generic redaction methods showed a much higher leakage rate of 2.5%.
Achieving zero credential leakage while preserving agent performance, SlotGuard redefines privacy standards for LLM transcripts.
LLM agents can leak privacy (e.g., paths, emails) and credentials (e.g., API keys) as agent observations (e.g., tool outputs, shell logs, and file reads) are appended to provider-bound transcripts. Existing placeholder redaction is brittle: it can miss embedded or cross-turn references, over-redact benign lookalikes, and destroy the structure useful for reasoning. We present SlotGuard, a local transcript boundary that can hide sensitive data while retaining agents' performance. SlotGuard rewrites structural bindings as typed, suffix-aware slots, replaces secrets with format-preserving synthetic values, links cross-turn references with a lightweight session graph, and restores raw values only inside the trusted runtime. On controlled repository-oriented agent transcripts, SlotGuard removes all 20,814 annotated structurally sensitive characters across 9,229 paths and reduces credential leakage to 0.0\% across 852 planted values. It remains close to raw-transcript task success across four upstream models, while generic redaction drops to 2.5\%. Transcript rewriting takes a median of 14.424~$渭$s per agent turn. The code is publicly accessible at https://github.com/illinoisdata/SlotGuard.
