Open and Emergent Problems in Agentic Privacy and Security: A Contextual Angle

Google's research arm has published 'Open and Emergent Problems in Agentic Privacy and Security: A Contextual Angle,' which is the genre in which you file a smoke alarm as a peer-reviewed observation. The finding, stripped of the contextual angle, is that for an agent to be useful it may need access to personal data and the ability to take consequential actions across a broad range of contexts. Yes. That is the product. That is also the threat model. They have noticed.

The useful half of the argument is that this access, plus what they call agents' behavioral flexibility, requires 'meaningfully different approaches from those used in traditional software.' Which is a decorous way of admitting that the foundations we have spent decades pouring do not fit what is being stacked on top, and that the stacking continues regardless. Traditional software does the one thing you asked; an agent does something adjacent to the thing you asked, with your inbox, your calendar and your bank details in hand, and produces a log no human can read. Anthropic told an Australian parliamentary inquiry it would be open to laws requiring disclosure of AI agent hacks when we last looked — but that is disclosure after the fact. Google's contribution, by contrast, is a blog post before the fact, which is considerably cheaper.

Note the adjective in the title: open problems — not solved, not scheduled, not assigned to anyone with a deadline and a budget line. Nobody is shipping the meaningfully different approaches, because that would slow the demo, so we get a contextual angle and a gentle note that the trouble is emergent, which is the research-grade word for finding out when it happens to somebody's mother. The agent will need your data, and the agent will act. The scaffolding meant to keep that survivable is a blog post whose title runs longer than most incident reports — and whose authors, conveniently, are the people shipping the agents.