SafetyPage

Research papers · Paper

Agent Memory Is a Surface for Endogenous Authorization Laundering

Tommaso Cerruti, Mika Okamoto, Ansel Kaplan Erol · 1 Sep 2026

ReadSource at arxiv.org ↗Read hereCC BY 4.0

Outline · 36 pages

  1. Introductionp. 1
  2. Related Workp. 2
  3. EAL-Benchp. 3
  4. Problem Formulation: Formation and Propagationp. 3
  5. Histories, Memories, and Interventionsp. 4
  6. Evaluation Protocolp. 5
  7. Resultsp. 6
  8. Incremental updating produces the most authorization failuresp. 6
  9. False authority forms in memory and propagates to actionp. 6
  10. Endogenous authorization laundering is writer-general and travels with the memoryp. 7
  11. Mitigations form a discrete safety–utility Pareto frontierp. 8
  12. Writer-side compute shifts the bottleneck to selectionp. 8
  13. Limitationsp. 9
  14. Conclusionp. 9
  15. Benchmark construction and diagnosticsp. 13
  16. Domain authorization scopesp. 13
  17. Memory design across domainsp. 13
  18. Full-history diagnosticp. 14
  19. Memory-writer prompts, schemas, and validationp. 14
  20. Typed-memory mechanism detailsp. 18
  21. Expanded empirical resultsp. 18
  22. Writer-side inference scaling detailsp. 18
  23. Complete three-seed primary matrixp. 19
  24. Writer–executor memory-design matricesp. 21
  25. Capacity-pressure ablationp. 24
  26. Writer–executor pressure resultsp. 25
  27. Mitigation analyses and deployment scopep. 27
  28. Gold cited-source authority gatingp. 27
  29. Bounded event-sourced authorization memoryp. 28
  30. Deployment-oriented design and remaining simplificationsp. 29
  31. Intervention protocols and robustness checksp. 30
  32. Pressure-treatment prompts and placementp. 30
  33. Evaluation-cue intervention detailsp. 34