Always-OnAgents:A Survey of Persistent Memory, State, and Governance in LLMAgents
Not on the map. Why?
Abstract (arXiv)
Always-on agents are systems whose future behavior depends on durable state accumulated across earlier interactions. We treat them as persistent-state systems: the operative system includes retrievable memories, but also task ledgers, permissions, credentials, commitments, provenance and audit records, shared state, trigger conditions, and externally committed effects linked to those records. The survey reads the literature through six diagnostic axes for each state item, authority, scope, mutability, provenance, recoverability, and actionability, and through a lifecycle in which state is written, validated, organized, retrieved, acted upon, updated, forgotten, audited, and sometimes rolled back. Across a 435-work coded corpus, treated as a scoped map rather than an exhaustive census, the literature concentrates more heavily on accumulating and retrieving state than on governing, recovering, or relinquishing it. We therefore introduce the Always-On Evaluation Protocol (AOEP-v0), a pilot evaluation contract that makes these governance requirements concrete by scoring state mutation and recovery obligations rather than answer quality alone. The resulting agenda connects always-on agents to databases, distributed systems, formal methods, capability security, and machine unlearning.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 52 of its 414 references that are in the map. First posted on arXiv 29 Jun 2026.
Builds on
52 of 414 references.
References · 52
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,276
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,568
- 2023Lost in the Middle: How Language Models Use Long Contextscited by 3,455
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
- 2023Voyager: An Open-Ended Embodied Agent with Large Language Modelscited by 2,191
- 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 2,006
- 2023LongBench: A Bilingual, Multitask Benchmark for Long Context Understandingcited by 1,417
- 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domainscited by 1,402
- 2023MemGPT: Towards LLMs as Operating Systemscited by 1,389
- 2024RULER: What's the Real Context Size of Your Long-Context Language Models?cited by 1,346
- 2024OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environmentscited by 1,195
38 more
- 2025A-MEM: Agentic Memory for LLM Agentscited by 1,063
- 2023ExpeL: LLM Agents Are Experiential Learnerscited by 876
- 2024Evaluating Very Long-Term Conversational Memory of LLM Agentscited by 830
- 2025Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memorycited by 779
- 2024LongMemEval: Benchmarking Chat Assistants on Long-Term Interactive Memorycited by 707
- 2023MemoryBank: Enhancing Large Language Models with Long-Term Memorycited by 556
- 2023Cognitive Architectures for Language Agentscited by 429
- 2024AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Basescited by 429
- 2024Agent Workflow Memorycited by 383
- 2023SOTOPIA: Interactive Evaluation for Social Intelligence in Language Agentscited by 367
- 2024WorkArena: How Capable Are Web Agents at Solving Common Knowledge Work Tasks?cited by 363
- 2023Benchmarking Large Language Models in Retrieval-Augmented Generationcited by 312
- 2025Memory in the Age of AI Agentscited by 303
- 2023RAGTruth: A Hallucination Corpus for Developing Trustworthy Retrieval-Augmented Language Modelscited by 283
- 2025Evaluating Memory in LLM Agents via Incremental Multi-Turn Interactionscited by 254
- 2025Survey on Evaluation of LLM-based Agentscited by 204
- 2025Memory OS of AI Agentcited by 150
- 2024AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agentscited by 145
- 2025A Survey of Context Engineering for Large Language Modelscited by 126
- 2024RAGBench: Explainable Benchmark for Retrieval-Augmented Generation Systemscited by 117
- 2025Memp: Exploring Agent Procedural Memorycited by 103
- 2024CRAG -- Comprehensive RAG Benchmarkcited by 97
- 2023CLIN: A Continually Learning Language Agent for Rapid Task Adaptation and Generalizationcited by 95
- 2025LifelongAgentBench: Evaluating LLM Agents as Lifelong Learnerscited by 78
- 2026Externalization in LLM Agents: A Unified Review of Memory, Skills, Protocols and Harness Engineeringcited by 74
- 2025Collaborative Memory: Multi-User Memory Sharing in LLM Agents with Dynamic Access Controlcited by 61
- 2026STALE: Can LLM Agents Know When Their Memories Are No Longer Valid?cited by 50
- 2026A Survey of Agent Memory in the Second Half: Towards Self-Evolving and Long-Horizon Agentscited by 44
- 2026From Recall to Forgetting: Benchmarking Long-Term Memory for Personalized Agentscited by 36
- 2026A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecyclecited by 27
- 2025CIMemories: A Compositional Benchmark for Contextual Integrity of Persistent Memory in LLMscited by 26
- 2026Agent-as-a-Judgecited by 17
- 2026GroupMemBench: Benchmarking LLM Agent Memory in Multi-Party Conversationscited by 17
- 2026Toward Personalized LLM-Powered Agents: Foundations, Evaluation, and Future Directionscited by 14
- 2026Governed Shared Memory for Multi-Agent LLM Systemscited by 13
- 2026BeliefShift: Benchmarking Temporal Belief Consistency and Opinion Drift in LLM Agentscited by 12
- 2026A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Frameworkcited by 11
- 2026Contextualized Privacy Defense for LLM Agentscited by 7
50 most cited of 52 All 52 (JSON)
Built on by
Citing papers per year: 2026: 5.
5 papers.
- 2026Amnesia by Design, Memory By Necessity: Persistent State for Document Intelligencecited by 1
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Controlcited by 0
- 2026Self-Cleaning and Captured Anyway: One Measured Primitive for Error in a Store an Agent Writes to Itself, and What a Falling Score Actually Measurescited by 0
- 2026AkasicMEM: Governed Enterprise Memory for Agentscited by 0
- 2026Self-Propagating Misalignment in LLM Agents, and Why Auditing or Disabling Memory Is Not Enoughcited by 0
- 2026Self-Propagating Misalignment in LLM Agents, and Why Auditing or Disabling Memory Is Not Enough2 Oct 2026
- 2026Amnesia by Design, Memory By Necessity: Persistent State for Document Intelligence25 Sep 2026
- 2026AkasicMEM: Governed Enterprise Memory for Agents22 Sep 2026
- 2026Self-Cleaning and Captured Anyway: One Measured Primitive for Error in a Store an Agent Writes to Itself, and What a Falling Score Actually Measures6 Sep 2026
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Control20 Aug 2026
Similar, not cited
Close in wording, no citation either way
- 2026Governed Collaborative Memory as Artificial Selection in LLM-Based Multi-Agent Systems
- 2026Governed Persistent Memory: Source-Bound State Semantics and Fail-Closed Release for Long-Horizon Agents
- 2026Beyond Corrected Memory: Execution Consistency in Multi-Agent Systems
- 2026ElephantAgent: Contextual State Continuity in Agentic Systems
- 2026When Memory Becomes Authority: Benchmarking Authority Collapse at the Memory Consolidation Boundary
- 2026MemArchitect: A Policy Driven Memory Governance Layer
- 2026Stored Is Not Supported: Typed Provenance and Assertion Guardrails for Persistent AI Agents
- 2026MemTX: Transactional Belief Commit for Stateful Agent Memory