mlsanityData to 7 Oct 2026

When Memory Becomes Authority: Benchmarking Authority Collapse at the Memory Consolidation Boundary

arXiv 2608.01679 ↗First posted 3 Aug 2026cs.AIcited by 6

On the map: LLM agents and tool use → Agent memory systems

Abstract (arXiv)

Persistent memory allows (self-evolving) LLM agents to adapt across tasks by consolidating heterogeneous interaction histories into reusable facts, preferences, observations, and rules. Yet consolidation also imposes an implicit authorization boundary: it determines whether stored information may later be consumed as a user fact, an attested observation, or a standing instruction. We identify authority collapse, in which consolidation preserves a claim while erasing the source constraints governing its authorized use, causing the stored memory to imply greater authority than its source permits. We introduce AuthMem-Bench, a controlled paired benchmark that holds the focal claim and downstream task fixed while varying only source authority. It evaluates write-time collapse, downstream authorization errors, and automatic authority preservation. Across seven consolidators based on widely used agent-memory systems and seven LLM backbones, we observe authority collapse in 48 of 49 evaluated configurations. In a controlled action-grounded evaluation, collapsed memories without authority metadata yield a mean unauthorized-action rate of 50.3%. In an end-to-end evaluation, automatically predicted and persisted authority labels reduce the observed unauthorized-action rate from 16.9% to 0.0%, while benign task success remains essentially unchanged. These findings show that memory-driven adaptation must preserve not only what was learned, but also the authority under which it may be reused.

Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Agent memory systems, one of 16 directions in LLM agents and tool use. Builds on 22 of its 33 references that are in the map. First posted on arXiv 3 Aug 2026.

Builds on

22 of 33 references.

Closest ancestors · 5

Same direction, newest first

  1. 2026Mitigating Provenance-Role Collapse in Long-Term Agents via Typed Memory Representation25 May
  2. 2025ReasoningBank: Scaling Agent Self-Evolving with Reasoning Memory29 Sep
  3. 2025Evaluating Memory in LLM Agents via Incremental Multi-Turn Interactions7 Jul
  4. 2025Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory28 Apr
  5. 2025A-MEM: Agentic Memory for LLM Agents17 Feb

Other references · 17

  1. 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,064
  2. 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,500
  3. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
  4. 2026DeepSeek-V4: Towards Highly Efficient Million-Token Context Intelligencecited by 877
  5. 2023ExpeL: LLM Agents Are Experiential Learnerscited by 814
  6. 2024LongMemEval: Benchmarking Chat Assistants on Long-Term Interactive Memorycited by 656
  7. 2025τ2-Bench: Evaluating Conversational Agents in a Dual-Control Environmentcited by 558
  8. 2023MemoryBank: Enhancing Large Language Models with Long-Term Memorycited by 539
  9. 2024InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agentscited by 476
  10. 2024AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Basescited by 402
  11. 2025Memory Injection Attacks on LLM Agents via Query-Only Interactioncited by 127
  12. 2025A-MemGuard: A Proactive Defense Framework for LLM-Based Agent Memorycited by 61
5 more
  1. 2026Zombie Agents: Persistent Control of Self-Evolving LLM Agents via Self-Reinforcing Injectionscited by 44
  2. 2024Permissive Information-Flow Analysis for Large Language Modelscited by 22
  3. 2026Hidden in Memory: Sleeper Memory Poisoning in LLM Agentscited by 22
  4. 2026MemMorph: Tool Hijacking in LLM Agents via Memory Poisoningcited by 8
  5. 2026Context-to-Execution Integrity for LLM Agentscited by 7

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 6.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Remember, Verify, or Ask? Cross-Family Evaluation of Memory Commitment in LLM Agents
  2. 2026GateMem: Benchmarking Memory Governance in Multi-Principal Shared-Memory Agents
  3. 2026When Consent Outlives Context: Residual Authority Replay in Long-Lived Agents
  4. 2026MemAudit: Auditing Long-Term Agent Memory via Hidden User-State Recovery
  5. 2026AgentSys: Secure and Dynamic LLM Agents Through Explicit Hierarchical Memory Management
  6. 2026Governed Collaborative Memory as Artificial Selection in LLM-Based Multi-Agent Systems
  7. 2026Injection-Execution Dissociation: A Mechanistic Evaluation of Persistent Memory Attacks and Defenses in Stateful LLM Agents
  8. 2026Controllable Memory Usage: Balancing Anchoring and Innovation in Long-Term Human-Agent Interaction