{"id":285,"date":"2026-08-04T13:14:30","date_gmt":"2026-08-04T17:14:30","guid":{"rendered":"https:\/\/blogs.groupware.org.uk\/01-Quantum-Inc\/?p=285"},"modified":"2026-08-04T13:24:51","modified_gmt":"2026-08-04T17:24:51","slug":"when-ai-agents-talk-they-leak-why-01-quantum-carleton-and-nc-cipser-are-putting-encrypted-ai-to-the-test","status":"publish","type":"post","link":"https:\/\/blogs.groupware.org.uk\/01-Quantum-Inc\/when-ai-agents-talk-they-leak-why-01-quantum-carleton-and-nc-cipser-are-putting-encrypted-ai-to-the-test\/","title":{"rendered":"When AI Agents Talk, They Leak: Why 01 Quantum, Carleton, and NC-CIPSeR Are Putting Encrypted AI to the Test"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>The uncomfortable truth about today&#8217;s enterprise AI is that it was never built to keep secrets \u2014 and now there&#8217;s an independent research program designed to prove exactly how much it gives away.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">01 Quantum Inc. (TSXV: ONE; OTCQB: OONEF), Carleton University, and the National Centre for Critical Infrastructure Protection, Security and Resilience (NC-CIPSeR) have announced a strategic research collaboration to stress-test defensive technologies against a problem most organizations haven&#8217;t priced in: modern AI systems that quietly reveal the sensitive data they were trusted to protect. The work is designed to quantify that leakage \u2014 and to demonstrate how Fully Homomorphic Encryption (FHE) and Post-Quantum Cryptography (PQC) can close the gap.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">The Problem Isn&#8217;t Hypothetical \u2014 It&#8217;s Architectural<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Most enterprise AI deployments share a hidden design flaw. When multiple AI agents collaborate on a task \u2014 fraud detection, customer risk scoring, claims triage \u2014 they routinely exchange sensitive customer data in plain text. Every hand-off between agents is a moment of exposure, and every exposure is an opportunity for an attacker. The Carleton and NC-CIPSeR project will simulate a realistic financial institution environment with exactly this kind of multi-agent workflow, then measure what falls out.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The specific vulnerability under the microscope is <strong>membership inference<\/strong> \u2014 where an outside party can statistically determine whether a particular customer&#8217;s record was part of a model&#8217;s training data. For a bank, a government agency, or a defense contractor, that&#8217;s not an abstract privacy nicety. It&#8217;s a direct line from a deployed AI model back to an individual, and it&#8217;s the kind of leakage that regulators and adversaries alike are learning to exploit.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Independent Validation, Not Marketing Claims<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">What makes this collaboration different is who&#8217;s doing the measuring. The first phase quantifies data leakage from a standard, non-encrypted AI system \u2014 establishing the baseline damage. A later phase tests an encryption-compatible model component to demonstrate how FHE can preserve privacy while the model still does useful work.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That sequencing matters. Rather than asserting that encrypted AI is safer, the project is structured to produce academically validated, third-party evidence of both the vulnerability and the remedy. For enterprises evaluating whether to trust their most sensitive workloads to AI, independent research from a leading Canadian institution carries a weight that vendor whitepapers never will.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Why FHE Is the Right Tool for a Data-in-Use Problem<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The reason 01 Quantum&#8217;s architecture is relevant here comes down to a gap most security stacks ignore. Encryption at rest protects stored data. Encryption in transit protects data moving across networks. But AI systems have to actually <em>process<\/em> data \u2014 and traditionally, that means decrypting it first, exposing it precisely when it&#8217;s most valuable. Fully Homomorphic Encryption changes the equation by allowing computation directly on encrypted data, so the information stays protected even while the model is working with it. That&#8217;s the &#8220;data-in-use&#8221; layer that plaintext AI leaves wide open.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">01 Quantum&#8217;s approach pairs FHE with its IronCAP\u2122 PQC technology \u2014 patent-protected in the U.S.A. under #11,271,715 and #11,669,833 and aligned with NIST&#8217;s FIPS 203, 204, and 205 standards \u2014 to bring AI workloads into a genuinely quantum-safe operating environment. It&#8217;s the same foundation that underpins the Company&#8217;s work across digital assets, but the AI privacy application represents the larger addressable market: every institution deploying multi-agent AI on sensitive data is a candidate.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">A Regulatory Tailwind, Not Just a Threat<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The timing lands alongside a shifting policy landscape. On June 22, 2026, an Executive Order directed U.S. federal agencies to accelerate preparations for quantum-enabled cybersecurity threats \u2014 instructing them to identify systems relying on vulnerable encryption, prioritize migration to quantum-resistant standards, and coordinate with industry partners to keep operations secure. The Order also flagged the &#8220;harvest now, decrypt later&#8221; risk, where adversaries collect encrypted data today to break it once quantum capabilities mature.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That&#8217;s the same threat model 01 Quantum has been building against, and the same NIST-aligned standards its technology is designed to fulfill. As CEO Andrew Cheung framed it, encrypted AI should become essential infrastructure in the years ahead \u2014 and this partnership is intended to supply the independent evidence that proves the point.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Ready Now, While Others Study the Problem<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The through-line across this collaboration is that 01 Quantum isn&#8217;t forming a committee or promising a roadmap \u2014 it&#8217;s bringing working PQC and FHE technology to an independent research program designed to validate it under realistic conditions. While much of the industry is still debating whether AI privacy is a real problem, this project is built to measure the damage and demonstrate the fix in the same breath.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The AI systems now running inside banks, agencies, and defense environments were built to be useful, not discreet \u2014 and the organizations that recognize the difference first will be the ones still trusted when the leakage becomes undeniable.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Learn more at <a href=\"https:\/\/www.01com.com\/\" target=\"_blank\" rel=\"noopener\">www.01com.com<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The uncomfortable truth about today&#8217;s enterprise AI is that it was never built to keep secrets \u2014 and now there&#8217;s an independent research program designed to prove exactly how much it gives away. 01 Quantum Inc. (TSXV: ONE; OTCQB: OONEF), Carleton University, and the National Centre for Critical Infrastructure Protection, Security and Resilience (NC-CIPSeR) have [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":286,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-285","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/blogs.groupware.org.uk\/01-Quantum-Inc\/wp-json\/wp\/v2\/posts\/285","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.groupware.org.uk\/01-Quantum-Inc\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.groupware.org.uk\/01-Quantum-Inc\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.groupware.org.uk\/01-Quantum-Inc\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.groupware.org.uk\/01-Quantum-Inc\/wp-json\/wp\/v2\/comments?post=285"}],"version-history":[{"count":1,"href":"https:\/\/blogs.groupware.org.uk\/01-Quantum-Inc\/wp-json\/wp\/v2\/posts\/285\/revisions"}],"predecessor-version":[{"id":287,"href":"https:\/\/blogs.groupware.org.uk\/01-Quantum-Inc\/wp-json\/wp\/v2\/posts\/285\/revisions\/287"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.groupware.org.uk\/01-Quantum-Inc\/wp-json\/wp\/v2\/media\/286"}],"wp:attachment":[{"href":"https:\/\/blogs.groupware.org.uk\/01-Quantum-Inc\/wp-json\/wp\/v2\/media?parent=285"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.groupware.org.uk\/01-Quantum-Inc\/wp-json\/wp\/v2\/categories?post=285"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.groupware.org.uk\/01-Quantum-Inc\/wp-json\/wp\/v2\/tags?post=285"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}