Stored Is Not Supported: Typed Provenance and Assertion Guardrails for Persistent AI Agents

arXiv:2609.02127 · cs.CR · Submitted 2026-09-02 · Read on arXiv

cs.CR

Submitted: 2026-09-02

Updated: 2026-09-02

Terminology

• Provenance — 39× in this paper · explained in 4 episodes
• Verification — 13× in this paper · explained in 2 episodes
• Trace — 12× in this paper · explained in 2 episodes
• Grounding — 10× in this paper · explained in 3 episodes
• AI Agents — 8× in this paper · explained in 2 episodes
• Consistency — 4× in this paper · explained in 3 episodes
• Generative Model — 3× in this paper · explained in 2 episodes
• Personalization — 3× in this paper · explained in 2 episodes
• Ablation — 2× in this paper · explained in 1 episode
• Accuracy — 2× in this paper · explained in 1 episode
• Agent Architectures — 2× in this paper · explained in 1 episode
• Benchmark — 2× in this paper · explained in 2 episodes
• Calibration — 2× in this paper · explained in 7 episodes
• Decoupling — 2× in this paper · explained in 2 episodes
• Embeddings — 2× in this paper · explained in 2 episodes
• Fidelity — 2× in this paper · explained in 2 episodes
• Generative AI — 2× in this paper · explained in 2 episodes
• Hallucination — 2× in this paper · explained in 3 episodes
• RAG — 2× in this paper · explained in 3 episodes
• Self-consistency — 2× in this paper · explained in 2 episodes
• Abstention — 1× in this paper · explained in 1 episode
• Admissibility — 1× in this paper · explained in 2 episodes
• Agent Memory — 1× in this paper · explained in 1 episode
• Computational overhead — 1× in this paper · explained in 2 episodes
• Data Provenance — 1× in this paper · explained in 2 episodes
• Failure Modes — 1× in this paper · explained in 3 episodes
• Formal Verification — 1× in this paper · explained in 2 episodes
• Foundation Model — 1× in this paper · explained in 3 episodes
• Hallucination Mitigation — 1× in this paper · explained in 2 episodes
• Pruning — 1× in this paper · explained in 4 episodes
• Release Contamination — 1× in this paper
• Topological Order — 1× in this paper · explained in 2 episodes
• Transformer — 1× in this paper · explained in 2 episodes
• Unsupported-Opportunity Release Rate — 1× in this paper

Sources

• MemGPT: Towards LLMs as Operating Systems
• Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory
• Beyond Memory: A Transactional Continuity Kernel for Long-Lived AI Agents
• MemTX: Transactional Belief Commit for Stateful Agent Memory
• Hidden in Memory: Sleeper Memory Poisoning in LLM Agents
• Mitigating Provenance-Role Collapse in Long-Term Agents via Typed Memory Representation
• Eywa: Provenance-Grounded Long-Term Memory for AI Agents
• MemLineage: Lineage-Guided Enforcement for LLM Agent Memory
• ConsistencyGate: Preventing Memory Contamination in LLM Agents via Self-Consistency Admission Control

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs