Behavioral Privacy Leakage in Agentic Negotiation: Formalizing and Mitigating Inference Attacks via Randomized Policies
Abstract
Autonomous negotiation agents are increasingly deployed in high-stakes settings such as insurance and procurement. While cryptographic techniques protect explicitly disclosed constraint values, they fail to address a subtler threat: behavioral privacy leakage, where an adversary infers private constraints from observable negotiation dynamics such as concession trajectories, timing, and convergence patterns. This paper investigates behavioral differential privacy in multi-round negotiation protocols. We design an adaptive stochastic negotiation policy that jointly guarantees (varepsilon, δ)-differential privacy, almost-sure convergence of the offer sequence (reaching agreement when the counterparty's reservation value permits), and high negotiation utility. Evaluated on 3,000 synthetic bilateral negotiations, our mechanism reduces adversarial inference accuracy by 43-50% while maintaining a negotiation success rate and utility above 90%, demonstrating that strong privacy guarantees can be achieved without significant loss of performance.
Community
Autonomous negotiation agents are moving into high-stakes settings like insurance and procurement. Everyone's been protecting the values being exchanged with cryptography — but we show that's not enough: the negotiation behavior itself (how you concede, when, and how fast) leaks your private constraints, even when every number on the wire is encrypted. We formalize this as behavioral differential privacy for multi-round negotiation, and design an adaptive stochastic policy that jointly guarantees (ε, δ)-DP, almost-sure convergence to agreement (when a deal is possible), and high utility. Across 3,000 synthetic bilateral negotiations it cuts an adversary's inference accuracy by 43-50% while keeping success rate and utility above 90%.
Takeaway: you can hide your negotiation strategy without losing the deal.
Get this paper in your agent:
hf papers read 2607.06815 Don't have the latest CLI?
curl -LsSf https://hf.co/cli/install.sh | bash Models citing this paper 0
No model linking this paper
Datasets citing this paper 0
No dataset linking this paper
Spaces citing this paper 0
No Space linking this paper
Collections including this paper 0
No Collection including this paper