aiqbench analysis
This research presents ASIRF, an agentic framework that dynamically retrieves domain-specific definitions for sensitive information redaction at inference time, eliminating the need for retraining on new domains. By leveraging multi-agent or single-agent architectures, it significantly outperforms static classifier baselines like OpenAI's Privacy Filter across diverse and out-of-distribution datasets without requiring additional training data. The work advances practical AI safety by addressing the critical limitation of fixed taxonomies in privacy-preserving systems.
ASIRF: An Agentic Framework for Context-Dependent Sensitive Information Redaction
arXiv:2609.29191v1 Announce Type: cross Abstract: Sensitive information is defined by domain and intent, not a universal category, yet redaction systems such as privacy filters and named-entity recognizers fix a taxonomy at training time, requiring retraining for each new domain. We introduce ASIRF (Agentic Sensitive Information Redaction Framework), which retrieves domain-specific definitions based on the input's domain from a flexible knowledge base at inference time, needing no retraining to adapt. Two architectures, a three-call multi-agent pipeline and a single-agent variant, are evaluated across ten small open-weight models and eight datasets, including out-of-distribution fictional domains, against the OpenAI Privacy Filter (OPF) as a trained-classifier baseline. With only a few dozen expert-authored definitions per domain and no training data, ASIRF's recall exceeds OPF's in 68 of 80 model-domain combinations (85 percent), by at least one of the two architectures, with shortfalls confined mostly to OPF's training-distribution domains.
Abstract:Sensitive information is defined by domain and intent, not a universal category, yet redaction systems such as privacy filters and named-entity recognizers fix a taxonomy at training time, requiring retraining for each new domain. We introduce ASIRF (Agentic Sensitive Information Redaction Framework), which retrieves domain-specific definitions based on the input's domain from a flexible knowledge base at inference time, needing no retraining to adapt. Two architectures, a three-call multi-agent pipeline and a single-agent variant, are evaluated across ten small open-weight models and eight datasets, including out-of-distribution fictional domains, against the OpenAI Privacy Filter (OPF) as a trained-classifier baseline. With only a few dozen expert-authored definitions per domain and no training data, ASIRF's recall exceeds OPF's in 68 of 80 model-domain combinations (85 percent), by at least one of the two architectures, with shortfalls confined mostly to OPF's training-distribution domains.
Artificial Intelligence (cs.AI); Information Retrieval (cs.IR); Machine Learning (cs.LG)
arXiv:2609.29191 [cs.AI]
(or arXiv:2609.29191v1 [cs.AI] for this version)
https://doi.org/10.48550/arXiv.2609.29191 Focus to learn more arXiv-issued DOI via DataCite (pending registration)
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Full text under the publisher's open licence · 239 words
Related coverage
Links #5: 2026/07
LessWrong · Jul 31, 2026
[AINews] High Taste Testers Ep. 1
Latent Space · Oct 17, 2026

Safeguard your agentic AI applications with the Amazon Bedrock Guardrails InvokeGuardrailChecks API
AWS · Jun 16, 2026

Implementing and Evaluating a Basic Per-Action Monitor for Safer Evals
METR · Sep 27, 2026