Agent Memory Is a Surface for Endogenous Authorization Laundering

Tommaso Cerruti, Mika Okamoto, Ansel Kaplan Erol

Long-running LLM agents rely on persistent memory to carry state across interactions, including permissions, restrictions, and revocations. When memory misrepresents this evolving…