ASLEval: Measuring Privacy Exposure Displacement in LLM Agent Sessions.

arXiv:2609.18864v2 Announce Type: replace-cross Abstract: Privacy evaluations of tool-using LLM agents often inspect a designated action, final response, or attacker report. These local proxies can miss unauthorized exposure elsewhere in a multi-step session a