Mitigating Over-Personalization in LLMs via Structured Memory
Not on the map. Why?
Abstract (arXiv)
Conversational assistants increasingly rely on persistent long-term memory to personalize responses across sessions. However, when stored user information is reintroduced into the model context, it can also influence responses in inappropriate or unrelated settings. We study two such failure modes in memory-augmented LLMs: cross-domain leakage, where memories from one life domain affect responses in another, and memory-induced sycophancy, where stored user beliefs make models more likely to agree with the user rather than respond truthfully. We apply a simple inference-time modification to how memories are presented to the model, without changing the model or the memory contents. Across seven models on PersistBench, we compare the commonly used all-in context format, where memories are injected as an unstructured list, with structured formats that partition memories by domain. This simple modification consistently reduces cross-domain leakage while preserving utility, with our strongest method reducing leakage by 8.8% on average relative to the baseline.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Builds on 27 of its 41 references that are in the map. First posted on arXiv 8 Aug 2026.
Builds on
27 of 41 references.
References · 27
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,568
- 2023MemGPT: Towards LLMs as Operating Systemscited by 1,389
- 2025gpt-oss-120b & gpt-oss-20b Model Cardcited by 1,386
- 2025A-MEM: Agentic Memory for LLM Agentscited by 1,063
- 2023Towards Understanding Sycophancy in Language Modelscited by 1,040
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 836
- 2024Evaluating Very Long-Term Conversational Memory of LLM Agentscited by 830
- 2024LongMemEval: Benchmarking Chat Assistants on Long-Term Interactive Memorycited by 707
- 2024RAPTOR: Recursive Abstractive Processing for Tree-Organized Retrievalcited by 532
- 2025Zep: A Temporal Knowledge Graph Architecture for Agent Memorycited by 400
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
15 more
- 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 171
- 2025ELEPHANT: Measuring and understanding social sycophancy in LLMscited by 129
- 2025Measuring Sycophancy of Language Models in Multi-turn Dialoguescited by 104
- 2024AirGapAgent: Protecting Privacy-Conscious Conversational Agentscited by 94
- 2025Hierarchical Memory for High-Efficiency Long-Term Reasoning in LLM Agentscited by 62
- 2025Collaborative Memory: Multi-User Memory Sharing in LLM Agents with Dynamic Access Controlcited by 61
- 2025REALTALK: A 21-Day Real-World Dataset for Long-Term Conversationcited by 35
- 2025Contextual Integrity in LLMs via Reasoning and Reinforcement Learningcited by 31
- 2025Interaction Context Often Increases Sycophancy in LLMscited by 26
- 2025CIMemories: A Compositional Benchmark for Contextual Integrity of Persistent Memory in LLMscited by 26
- 2024Prompt Leakage effect and defense strategies for multi-turn LLM interactionscited by 23
- 2026PersistBench: When Should Long-Term Memories Be Forgotten by LLMs?cited by 21
- 2026Memory in the LLM Era: Modular Architectures and Strategies in a Unified Frameworkcited by 12
- 2025Mitigating Memorization in LLMs using Activation Steeringcited by 8
- 2026Privacy Collapse: Benign Fine-Tuning Can Break Contextual Privacy in Language Modelscited by 6
Built on by
Citing papers per year: 2026: 3.
3 papers.