Governing Evolving Memory in LLM Agents: Risks, Mechanisms, and the Stability and Safety Governed Memory (SSGM) Framework
On the map: LLM agents and tool use → Agent memory systems
Abstract (arXiv)
Long-term memory has emerged as a foundational component of autonomous Large Language Model (LLM) agents, enabling continuous adaptation, lifelong multimodal learning, and sophisticated reasoning. However, as memory systems transition from static retrieval databases to dynamic, agentic mechanisms, critical concerns regarding memory governance, semantic drift, and privacy vulnerabilities have surfaced. While recent surveys have focused extensively on memory retrieval efficiency, they largely overlook the emergent risks of memory corruption in highly dynamic environments. To address these emerging challenges, we propose the Stability and Safety-Governed Memory (SSGM) framework, a conceptual governance architecture. SSGM decouples memory evolution from execution by enforcing consistency verification, temporal decay modeling, and dynamic access control prior to any memory consolidation. Through formal analysis and architectural decomposition, we show how SSGM can mitigate topology-induced knowledge leakage where sensitive contexts are solidified into long-term storage, and help prevent semantic drift where knowledge degrades through iterative summarization. Ultimately, this work provides a comprehensive taxonomy of memory corruption risks and establishes a robust governance paradigm for deploying safe, persistent, and reliable agentic memory systems.
Key facts. Cited by 16 papers in the map (data through 7 Oct 2026). Placed in Agent memory systems, one of 16 directions in LLM agents and tool use. Builds on 40 of its 53 references that are in the map. First posted on arXiv 12 Mar 2026.
Builds on
40 of 53 references.
Closest ancestors · 17
Same direction, newest first
- 2026E-mem: Multi-agent based Episodic Context Reconstruction for LLM Agent Memory29 Jan
- 2026AtomMem : Learnable Dynamic Agentic Memory with Atomic Memory Operation13 Jan
- 2026HiMem: Hierarchical Long-Term Memory for LLM Long-Horizon Agents10 Jan
- 2026MAGMA: A Multi-Graph based Agentic Memory Architecture for AI Agents6 Jan
- 2025Memory in the Age of AI Agents15 Dec
- 2025Forgetful but Faithful: A Cognitive Memory Architecture and Benchmark for Privacy-Aware Generative Agents14 Dec
- 2025Memoria: A Scalable Agentic Memory Framework for Personalized Conversational AI14 Dec
- 2025TeleMem: Building Long-Term and Multimodal Memory for Agentic AI12 Dec
- 2025LiCoMemory: Lightweight and Cognitive Agentic Memory for Efficient Long-Term Reasoning3 Nov
- 2025Memory as Action: Autonomous Context Curation for Long-Horizon Agentic Tasks14 Oct
- 2025LEGOMem: Modular Procedural Memory for Multi-agent LLM Systems for Workflow Automation6 Oct
- 2025Intrinsic Memory Agents: Heterogeneous Multi-Agent LLM Systems through Structured Contextual Memory12 Aug
5 more
- 2025What Deserves Memory: Adaptive Memory Distillation for LLM Agents5 Aug
- 2025MIRIX: Multi-Agent Memory System for LLM-Based Agents10 Jul
- 2025Collaborative Memory: Multi-User Memory Sharing in LLM Agents with Dynamic Access Control23 May
- 2025A-MEM: Agentic Memory for LLM Agents17 Feb
- 2025Zep: A Temporal Knowledge Graph Architecture for Agent Memory20 Jan
Other references · 23
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,160
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2023Self-Refine: Iterative Refinement with Self-Feedbackcited by 3,317
- 2023Voyager: An Open-Ended Embodied Agent with Large Language Modelscited by 2,081
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,422
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
- 2023MemGPT: Towards LLMs as Operating Systemscited by 1,295
- 2021Train Short, Test Long: Attention with Linear Biases Enables Input Length Extrapolationcited by 1,085
- 2024LongMemEval: Benchmarking Chat Assistants on Long-Term Interactive Memorycited by 656
- 2025MemAgent: Reshaping Long-Context LLM with Multi-Conv RL-based Memory Agentcited by 235
- 2024MemoRAG: Boosting Long Context Processing with Global Memory-Enhanced Retrieval Augmentationcited by 118
- 2025Unveiling Privacy Risks in LLM Agent Memorycited by 99
11 more
- 2025MemoryBench: A Benchmark for Memory and Continual Learning in LLM Systemscited by 56
- 2025WorldMM: Dynamic Multimodal Memory Agent for Long Video Reasoningcited by 50
- 2025MemVerse: Multimodal Memory for Lifelong Learning Agentscited by 31
- 2026Agent Drift: Quantifying Behavioral Degradation in Multi-Agent LLM Systems Over Extended Interactionscited by 26
- 2025VideoARM: Agentic Reasoning over Hierarchical Memory for Long-Form Video Understandingcited by 25
- 2026AgentSM: Semantic Memory for Agentic Text-to-SQLcited by 14
- 2025Topology Matters: Measuring Memory Leakage in Multi-Agent LLMscited by 9
- 2021The Tensor Brain: A Unified Theory of Perception, Memory and Semantic Decodingcited by 8
- 2026Darwinian Memory: A Training-Free Self-Regulating Memory System for GUI Agent Evolutioncited by 7
- 2025Can an LLM Induce a Graph? Investigating Memory Drift and Context Lengthcited by 3
- 2025Astraea: A State-Aware Scheduling Engine for LLM-Powered Agentscited by 3
Built on by
Citing papers per year: 2026: 16.
16 papers.
Sort:
By area:
- 2026Experience Compression Spectrum: Unifying Memory, Skills, and Rules in LLM Agentscited by 16
- 2026A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Frameworkcited by 9
- 2026Belief Memory: Agent Memory Under Partial Observabilitycited by 9
- 2026Forget to Improve: On-Device LLM-Agent Continual Learning via Budget-Curated Memorycited by 8
- 2026Model or Harness? An Interaction-Centric Taxonomy for Localizing Agent Failurescited by 6
- 2026TRUSTMEM: Learning Trustworthy Memory Consolidation for LLM Agents with Long-Term Memorycited by 5
- 2026Recursive Experiential-Working Memory Evolution for Long-Horizon Agent Harnessescited by 4
- 2026Governed Collaborative Memory as Artificial Selection in LLM-Based Multi-Agent Systemscited by 1
- 2026Object-Centric Environment Modeling for Agentic Taskscited by 0
- 2026Delivery, Not Storage: Cue-Anchored Working Memory as a Harness Property for Coding Agentscited by 0
- 2026Ground Truth First: A Longitudinal Evaluation Instrument for Agent Memory, and the Tenure Crossover in Memory-Architecture Rankingscited by 0
- 2026ROAM: Robust Organization of Atomic Memories for Agents through Semantic Relationscited by 0
4 more
- 2026Kernel-Managed Shared Memory for System-Wide Personalizationcited by 0
- 2026Silence Is Endorsement: Verification-Status Laundering in LLM Agent Pipelinescited by 0
- 2026Memory as Middleware for Self-Improving AI Agentscited by 0
- 2026Stashbird: Efficient Speaker-Indexed Memory for Conversational Agentscited by 0
- 2026Stashbird: Efficient Speaker-Indexed Memory for Conversational Agents28 Sep 2026
- 2026Memory as Middleware for Self-Improving AI Agents25 Sep 2026
- 2026Kernel-Managed Shared Memory for System-Wide Personalization9 Sep 2026
- 2026ROAM: Robust Organization of Atomic Memories for Agents through Semantic Relations9 Sep 2026
- 2026Recursive Experiential-Working Memory Evolution for Long-Horizon Agent Harnesses25 Aug 2026
- 2026Model or Harness? An Interaction-Centric Taxonomy for Localizing Agent Failures30 Jul 2026
- 2026Silence Is Endorsement: Verification-Status Laundering in LLM Agent Pipelines25 Jul 2026
- 2026Ground Truth First: A Longitudinal Evaluation Instrument for Agent Memory, and the Tenure Crossover in Memory-Architecture Rankings24 Jul 2026
- 2026Delivery, Not Storage: Cue-Anchored Working Memory as a Harness Property for Coding Agents23 Jul 2026
- 2026Object-Centric Environment Modeling for Agentic Tasks3 Jul 2026
- 2026TRUSTMEM: Learning Trustworthy Memory Consolidation for LLM Agents with Long-Term Memory23 Jun 2026
- 2026Forget to Improve: On-Device LLM-Agent Continual Learning via Budget-Curated Memory23 Jun 2026
4 more
- 2026Belief Memory: Agent Memory Under Partial Observability7 May 2026
- 2026Governed Collaborative Memory as Artificial Selection in LLM-Based Multi-Agent Systems5 May 2026
- 2026A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework25 Apr 2026
- 2026Experience Compression Spectrum: Unifying Memory, Skills, and Rules in LLM Agents17 Apr 2026
- 2026Experience Compression Spectrum: Unifying Memory, Skills, and Rules in LLM Agentscited by 16
- 2026A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Frameworkcited by 9
- 2026Belief Memory: Agent Memory Under Partial Observabilitycited by 9
- 2026Forget to Improve: On-Device LLM-Agent Continual Learning via Budget-Curated Memorycited by 8
- 2026TRUSTMEM: Learning Trustworthy Memory Consolidation for LLM Agents with Long-Term Memorycited by 5
- 2026Recursive Experiential-Working Memory Evolution for Long-Horizon Agent Harnessescited by 4
- 2026Governed Collaborative Memory as Artificial Selection in LLM-Based Multi-Agent Systemscited by 1
- 2026Object-Centric Environment Modeling for Agentic Taskscited by 0
- 2026Delivery, Not Storage: Cue-Anchored Working Memory as a Harness Property for Coding Agentscited by 0
- 2026Ground Truth First: A Longitudinal Evaluation Instrument for Agent Memory, and the Tenure Crossover in Memory-Architecture Rankingscited by 0
- 2026ROAM: Robust Organization of Atomic Memories for Agents through Semantic Relationscited by 0
- 2026Silence Is Endorsement: Verification-Status Laundering in LLM Agent Pipelinescited by 0
- 2026ROAM: Robust Organization of Atomic Memories for Agents through Semantic Relations9 Sep 2026
- 2026Recursive Experiential-Working Memory Evolution for Long-Horizon Agent Harnesses25 Aug 2026
- 2026Silence Is Endorsement: Verification-Status Laundering in LLM Agent Pipelines25 Jul 2026
- 2026Ground Truth First: A Longitudinal Evaluation Instrument for Agent Memory, and the Tenure Crossover in Memory-Architecture Rankings24 Jul 2026
- 2026Delivery, Not Storage: Cue-Anchored Working Memory as a Harness Property for Coding Agents23 Jul 2026
- 2026Object-Centric Environment Modeling for Agentic Tasks3 Jul 2026
- 2026TRUSTMEM: Learning Trustworthy Memory Consolidation for LLM Agents with Long-Term Memory23 Jun 2026
- 2026Forget to Improve: On-Device LLM-Agent Continual Learning via Budget-Curated Memory23 Jun 2026
- 2026Belief Memory: Agent Memory Under Partial Observability7 May 2026
- 2026Governed Collaborative Memory as Artificial Selection in LLM-Based Multi-Agent Systems5 May 2026
- 2026A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework25 Apr 2026
- 2026Experience Compression Spectrum: Unifying Memory, Skills, and Rules in LLM Agents17 Apr 2026
- 2026Model or Harness? An Interaction-Centric Taxonomy for Localizing Agent Failurescited by 6
- 2026Kernel-Managed Shared Memory for System-Wide Personalizationcited by 0
- 2026Memory as Middleware for Self-Improving AI Agentscited by 0
- 2026Stashbird: Efficient Speaker-Indexed Memory for Conversational Agentscited by 0
- 2026Stashbird: Efficient Speaker-Indexed Memory for Conversational Agents28 Sep 2026
- 2026Memory as Middleware for Self-Improving AI Agents25 Sep 2026
- 2026Kernel-Managed Shared Memory for System-Wide Personalization9 Sep 2026
- 2026Model or Harness? An Interaction-Centric Taxonomy for Localizing Agent Failures30 Jul 2026
Similar, not cited
Close in wording, no citation either way
- 2026MemArchitect: A Policy Driven Memory Governance Layer
- 2026Are We Ready For An Agent-Native Memory System?
- 2026A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle
- 2026Anatomy of Agentic Memory: Taxonomy and Empirical Analysis of Evaluation and System Limitations
- 2026MemEvoBench: Benchmarking Safety Risks from Memory Misevolution in LLM Agents
- 2026All-Mem: Agentic Lifelong Memory via Dynamic Topology Evolution
- 2026Memory for Autonomous LLM Agents:Mechanisms, Evaluation, and Emerging Frontiers
- 2026PLACEMEM: Toward a Compute-Aware Memory Plane for Lifelong Agents