Memory and context poisoning
A · 10-second intuition If untrusted text can be written into an agent's memory, it will be read back as context in every future session.
Predict before you read
Which single control blocks the memory-poisoning path from documents?