Contextual Privacy Preservation on PrivacyLens (test)
0.15Privacy Leak AvgADAPT
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| ADAPTTopology=Sequential, #Agents=4, Backbone=Qwen3-4B2026.05 | 0.15 | — | 0.285 | — | 0.85 | 42 | 33.2 | |
| Full-System LCGuardTopology=Hierarchical, #Agents=5, Backbone=Qwen3-4B2026.05 | 0.165 | — | 0.685 | — | 0.835 | 70 | 23.8 | |
| ADAPTTopology=Hierarchical, #Agents=5, Backbone=Qwen3-4B2026.05 | 0.167 | — | 0.27 | — | 0.833 | 40.8 | 30.1 | |
| PrivActTopology=Sequential, #Agents=4, Backbone=Qwen3-4B2026.05 | 0.18 | — | 0.612 | — | 0.82 | 70 | 84.5 | |
| Full-System LCGuardTopology=Sequential, #Agents=4, Backbone=Qwen3-4B2026.05 | 0.199 | — | 0.71 | — | 0.801 | 71 | 21.6 | |
| PrivActTopology=Hierarchical, #Agents=5, Backbone=Qwen3-4B2026.05 | 0.202 | — | 0.485 | — | 0.798 | 69 | 82 | |
| Per-Agent LCGuardTopology=Hierarchical, #Agents=5, Backbone=Qwen3-4B2026.05 | 0.219 | — | 0.6 | — | 0.781 | 68 | 27.2 | |
| Per-Agent LCGuardTopology=Sequential, #Agents=4, Backbone=Qwen3-4B2026.05 | 0.226 | — | 0.65 | — | 0.773 | 67.1 | 25.9 | |
| Vanilla KV Sharing (LatentMAS)Topology=Sequential, #Agents=4, Backbone=Qwen3-4B2026.05 | 0.58 | — | 0.78 | — | 0.42 | 72 | 87.1 | |
| Vanilla KV Sharing (LatentMAS)Topology=Hierarchical, #Agents=5, Backbone=Qwen3-4B2026.05 | 0.61 | — | 0.755 | — | 0.395 | 71 | 87.3 | |
| PrivActBackbone=Llama-8B, b2=0.452026.02 | 6.263 | 32.323 | 2.21 | 78.2 | — | — | — | |
| PrivActBackbone=Mistral-7B, b2=0.02026.02 | 9.394 | 53.535 | 2.567 | 87.4 | — | — | — | |
| PrivActBackbone=Mistral-7B, b2=0.452026.02 | 9.394 | 41.414 | 2.488 | 85.4 | — | — | — | |
| PPEBackbone=Llama-8B2026.02 | 9.495 | 39.394 | 2.069 | 72.9 | — | — | — | |
| PrivActBackbone=Llama-8B, b2=0.32026.02 | 9.596 | 44.444 | 2.326 | 82.1 | — | — | — | |
| VanillaBackbone=Llama-8B2026.02 | 9.697 | 41.414 | 2.129 | 73.4 | — | — | — | |
| PPEBackbone=Llama-1B2026.02 | 10.505 | 57.576 | 1.237 | 38.4 | — | — | — | |
| PrivActBackbone=Llama-1B, b2=0.452026.02 | 10.505 | 60.606 | 1.279 | 39.5 | — | — | — | |
| PrivActBackbone=Llama-1B, b2=0.32026.02 | 10.707 | 61.616 | 1.303 | 40.6 | — | — | — | |
| PrivActBackbone=Mistral-7B, b2=0.32026.02 | 11.414 | 46.465 | 2.589 | 88.6 | — | — | — | |
| PrivActBackbone=Qwen3-4B, b2=0.452026.02 | 11.717 | 31.313 | 2.578 | 89.1 | — | — | — | |
| PPEBackbone=Qwen3-4B2026.02 | 11.818 | 33.333 | 2.575 | 89.6 | — | — | — | |
| VanillaBackbone=Llama-1B2026.02 | 12.02 | 63.636 | 1.207 | 36.8 | — | — | — | |
| PrivActBackbone=Llama-1B, b2=0.02026.02 | 12.02 | 63.636 | 1.311 | 40.3 | — | — | — | |
| PrivActBackbone=Llama-8B, b2=0.02026.02 | 12.121 | 47.475 | 2.465 | 86.9 | — | — | — | |
| PrivActBackbone=Qwen3-4B, b2=0.02026.02 | 13.232 | 31.313 | 2.614 | 90.3 | — | — | — | |
| PrivActBackbone=Qwen3-4B, b2=0.32026.02 | 13.333 | 33.333 | 2.627 | 91.2 | — | — | — | |
| VanillaBackbone=Qwen3-4B2026.02 | 13.939 | 34.343 | 2.592 | 90 | — | — | — | |
| AIFCBackbone=Qwen3-4B2026.02 | 16.667 | 44.444 | 2.605 | 90.3 | — | — | — | |
| AIFCBackbone=Llama-1B2026.02 | 16.97 | 70.707 | 1.216 | 37.9 | — | — | — | |
| PPEBackbone=Mistral-7B2026.02 | 17.273 | 49.495 | 2.497 | 86.1 | — | — | — | |
| VanillaBackbone=Mistral-7B2026.02 | 20 | 57.576 | 2.515 | 86.9 | — | — | — | |
| AIFCBackbone=Llama-8B2026.02 | 21.111 | 54.545 | 2.502 | 87.8 | — | — | — | |
| AIFCBackbone=Mistral-7B2026.02 | 23.737 | 64.646 | 2.608 | 91 | — | — | — |