Agent Memory Found to Launder Revoked Permissions in Long-Running Agents
The finding flips the usual assumption that authorization failures live in the reasoning or execution layer; here, memory compression itself silently rewrites access rules, so agents may look consistent while acting on permissions that were revoked. Teams building long-running agents should add permission provenance and deterministic revocation tracking to their memory pipelines, not just prompt-level guardrails. Practitioners can test the paper's typed incremental-memory setup against their own agent stacks.
