Characterize generalization beyond digit and binary predicates

Investigate whether inadvertent context-leakage attacks and measurements generalize to predicate types, language models, and deployment configurations beyond the digit-value and binary-attribute settings evaluated in the paper.

Background

The experimental evaluation considers two predicate families: numeric digit values and binary attributes representing whether user-memory attributes are present. It also uses a fixed collection of models and deployment assumptions, including black-box query access and the ability to perform estimation queries. The paper explicitly leaves open whether its findings extend to other predicates, models, and deployment configurations.