mlsanityData to 7 Oct 2026

Portable Agent Memory: A Protocol for Cryptographically-Verified Memory Transfer Across Heterogeneous AI Agents

arXiv 2605.11032 ↗First posted 10 May 2026cs.CR cs.AIcited by 4

On the map: LLM agents and tool use → Agent memory systems

Abstract (arXiv)

We present Portable Agent Memory, an open protocol and reference implementation for transferring persistent memory state across heterogeneous AI agents. Modern AI agents accumulate rich context -- episodic events,semantic knowledge, procedural skills, working state, and identity preferences -- but this context remains locked within vendor-specific runtimes. Portable Agent Memory addresses this through: (1) a five-component structured memory model with content-addressable entries linked by a Merkle-DAG provenance graph providing tamper-evidence; (2) capability-based access control enabling selective, scoped disclosure of memory segments; (3) an injection-resistant rehydration protocol that adapts recalled content to heterogeneous target models while mitigating indirect prompt injection; and (4) a JSON-first serialization format with optional CBOR compaction for efficient transport. We provide a Python SDK with 54 passing tests, agent skills for multiple platforms, and demonstrate cross-model memory transfer between GPT-4, Claude, Gemini, and Llama architectures. The protocol is open-source under Apache 2.0.

Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in Agent memory systems, one of 16 directions in LLM agents and tool use. Builds on 12 of its 25 references that are in the map. First posted on arXiv 10 May 2026.

Builds on

12 of 25 references.

Closest ancestors · 1

Same direction, newest first

  1. 2025Zep: A Temporal Knowledge Graph Architecture for Agent Memory20 Jan

Other references · 11

  1. 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,160
  2. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
  3. 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,072
  4. 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,064
  5. 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,500
  6. 2023Voyager: An Open-Ended Embodied Agent with Large Language Modelscited by 2,081
  7. 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,906
  8. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
  9. 2023MemGPT: Towards LLMs as Operating Systemscited by 1,295
  10. 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 760
  11. 2023Cognitive Architectures for Language Agentscited by 422

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 4.

4 papers.

  1. 2026A Frozen 12B Beats Frontier Models on Verified Work: 100% Accuracy, 0 Tokens, Bit-Exact, Forevercited by 2
  2. 2026MutMem: Cryptographically Authorized Mutation in Persistent Agent Memorycited by 2
  3. 2026Runtime-Independent Persistent Agents: Preserving Identity, Memory, and Code Across Models, Harnesses, and Serverscited by 2
  4. 2026When Do Prompt-Side Agent Playbooks Transfer? Accuracy, Cost, and Runtime Shift in Agent Deploymentcited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2026Memory as Middleware for Self-Improving AI Agents
  2. 2026Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems
  3. 2026Beyond Similarity: Trustworthy Memory Search for Personal AI Agents
  4. 2025SAMEP: A Secure Protocol for Persistent Context Sharing Across AI Agents
  5. 2026Are We Ready For An Agent-Native Memory System?
  6. 2025Intrinsic Memory Agents: Heterogeneous Multi-Agent LLM Systems through Structured Contextual Memory
  7. 2026SMSR: Certified Defence Against Runtime Memory Poisoning in Persistent LLM Agent Systems
  8. 2026PLACEMEM: Toward a Compute-Aware Memory Plane for Lifelong Agents