The signal
A Google Research workshop report examines agent privacy and security through contextual integrity: information sharing and actions should be appropriate to the situation, not merely technically possible.
The idea to learn
Access alone does not express intent. A system may be allowed to read a calendar without being authorized to send its contents to another person. Context includes the participants, data type, and rules governing its use.
A practical lens
For an agent task, describe both the intended outcome and the permitted information flows. Separate untrusted content from instructions. Place enforcement at the tool boundary as well as in the model guidance.
Try this
For a travel-planning assistant, list which details an airline, a hotel, and a colleague each need. Notice how the permitted information changes with the recipient.
An independent learning note, curated 18 October 2026. The practical lens and exercise are editorial suggestions.