Develop institution-level mechanisms satisfying the privacy bound

Develop mechanisms that satisfy the institution-level Pufferfish privacy bound over a realistic combined observer view containing released weights, public membership information, timing metadata, and other observable channels.

Background

The institution-level guarantee targets protection of institutional participation, strategy, or capability rather than an individual record. The paper identifies a realistic evaluation protocol involving leave-one-institution-out attacks, timing-only attacks, and combined attacks over released weights, public membership, and timing. Although the formal target is stated, the authors note that mechanisms achieving the bound for a realistic observer view remain unresolved.

References

Eq.~\ref{eq:pufferfish} states the target; what remains open is choosing $\Theta$ for a scientific consortium and obtaining mechanisms that meet the bound over a realistic $V_O$.

— Privacy Foundations for Multi-Institutional Scientific Artificial Intelligence  (2609.39787 - Kotevska et al., 30 Sep 2026) in Section 9, subsection “Research Priorities and Outlook,” under “Institution-level guarantees”