Audience-Bound Persistent Memory: Authorization Across the Memory Lifecycle

arXiv:2609.36373 · cs.CR, cs.AI · Submitted 2026-09-28 · Read on arXiv

cs.CR, cs.AI

Submitted: 2026-09-28

Updated: 2026-09-28

Terminology

• Provenance — 26× in this paper · explained in 3 episodes
• Abstention — 9× in this paper · explained in 1 episode
• Agent Memory — 7× in this paper · explained in 1 episode
• Benchmark — 6× in this paper · explained in 2 episodes
• Benchmarking — 5× in this paper · explained in 3 episodes
• Consistency — 5× in this paper · explained in 3 episodes
• Agentic System — 3× in this paper · explained in 2 episodes
• LLM-as-a-Judge — 3× in this paper · explained in 3 episodes
• AI Agents — 2× in this paper · explained in 2 episodes
• Accuracy — 2× in this paper · explained in 1 episode
• Core — 2× in this paper · explained in 2 episodes
• Generative AI — 2× in this paper · explained in 2 episodes
• In International Conference on Learning Representations — 2× in this paper
• Knowledge Graph — 2× in this paper · explained in 7 episodes
• RAG — 2× in this paper · explained in 3 episodes
• Trace — 2× in this paper · explained in 2 episodes
• Verification — 2× in this paper · explained in 2 episodes
• Adam — 1× in this paper · explained in 2 episodes
• Adaptation — 1× in this paper · explained in 1 episode
• Agent Harness — 1× in this paper · explained in 2 episodes
• Data Fusion — 1× in this paper · explained in 3 episodes
• Embeddings — 1× in this paper · explained in 2 episodes
• Failure Modes — 1× in this paper · explained in 3 episodes
• Foundation Model — 1× in this paper · explained in 3 episodes
• Foundation Models — 1× in this paper · explained in 7 episodes

Sources

• Judging LLM-as-a-Judge: Concerning Rubric Artifacts in LLM-based Automated Text Generation Evaluation
• SuperLocalMemory 4.0: The Governed Memory Operating System for AI Agents
• Agent Memory Is a Surface for Endogenous Authorization Laundering
• A Judge Should Know What Changed:Construct Validity for LLM-as-a-Judge Evaluation
• Deployment-Time Memorization in Foundation-Model Agents
• MemSecBench: Tracking Agent Memory Poisoning from Persistence to Consequence and Repair
• Securing AI Agents with Information-Flow Control
• Defeating Prompt Injections by Design
• PiSAs: Benchmarking Contextual Integrity in Multi-User Agentic Systems
• Evaluating Long-Horizon Memory for Multi-Party Collaborative Dialogues
• Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees
• Governed Shared Memory for Multi-Agent LLM Systems
• Formal Policy Enforcement for Real-World Agentic Systems
• Can LLM-as-a-Judge Reliably Verify Rubrics in Agentic Scenarios?
• GateMem: Benchmarking Memory Governance in Multi-Principal Shared-Memory Agents
• Collaborative Memory: Multi-User Memory Sharing in LLM Agents with Dynamic Access Control
• MutMem: Cryptographically Authorized Mutation in Persistent Agent Memory
• MAP-Graph: Provenance-Aware Shared Memory for Multi-Agent Workflows
• GroupMemBench: Benchmarking LLM Agent Memory in Multi-Party Conversations

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs