: Mobile devices store highly sensitive personal data, yet privacy failures often arise not from technical compromise but from mismatches between user intent and sharing interfaces that offer little contextual nuance. We propose ORCHID-FL, an on-device, language-mediated privacy agent that combines tag-grounded perception, a promptable LLM that proposes sharing decisions, and a deterministic rule engine that retains final authority. To allow the agent to adapt to evolving social and institutional norms without centralising sensitive data, ORCHID-FL is designed to participate in a federated fine-tuning loop using parameter-efficient (LoRA-style) updates. We position this paper as an architectural proposal: we present the system design, a hybrid LLM + deterministic-rule decision pipeline, and a threat model that treats the LLM and the federation channel as untrusted. We provide preliminary empirical evidence on the perception layer by comparing CNN-tag, multimodal-tag, and end-to-end multimodal architectures on 200 VizWiz-Priv images annotated by the author, and find that structured tag-grounded pipelines achieve the highest decision agreement and the lowest unintended disclosure rate. Federated fine-tuning evaluation, multi-annotator validation, and quantification of the differential-privacy/utility trade-off are deferred to future work.
George Popescu-Craiova· Proceedings of the 23rd Inte...· 0 citations
: Federated Learning enables collaborative model training without sharing raw user data, yet remains vulnerable to privacy threats via shared gradients, model updates, and the hardware in which aggregation runs. Users must trust that centralised servers correctly aggregate updates and enforce data access policies. This paper introduces TrusTEE, an end-to-end hardware-backed confidential federated learning system that combines cloud Trusted Execution Environments (TEEs) with user-controlled, policy-enforced object storage. Unlike prior TEE-based federated learning work, TrusTEE treats cloud object storage as the primary communication substrate and trust boundary, using a minimal TEE-based aggregator and cloud-native role-based access control (RBAC) to separate roles. The system ensures that (1) raw client updates are never visible to the coordinator, (2) aggregation occurs entirely in hardware-encrypted memory, and (3) access to updates, aggregates, and global weights is enforced via strict identity-bound storage policies. We evaluate TrusTEE using the FLAIR dataset and show that confidential aggregation can be achieved while preserving standard federated learning dynamics.
George Popescu-Craiova, M. Fernández· Proceedings of the 23rd Inte...· 0 citations