AIM: A Privacy-Aware Interoperable Memory Framework for Multi-Agent Multi-User LLM Systems
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Traditional large language models (LLMs) are scoped to individual user sessions, limiting their knowledge to a single conversation and preventing them from learning user preferences that evolve over time. Existing agentic memory systems address this limitation but generally operate at the individual-user level, restricting the public knowledge that could be shared across users to improve downstream responses. We introduce AIM (Agentic Interoperable Memory), a unified, privacy-aware memory framework that enables multi-agent, multi-user LLM systems to persistently manage private and shared memory. AIM dynamically classifies information as private, scoped to one user and inaccessible to others, or public, accessible to all users. It enforces index-level access controls so that private memories are retrievable only by their owner, protecting sensitive data while allowing beneficial shared knowledge to improve coordination and consistency. We also introduce MUMBench (Multi-User Memory Benchmark), a dataset of multi-user interactions containing private and shareable information across four domains. To our knowledge, MUMBench is the first public dataset designed to evaluate multiple memory operations, including retrieval, creation, update, and deletion, in a multi-user environment. Across three independent runs on MUMBench, AIM achieves 96.0% visibility classification accuracy, 58.8% strict operation accuracy, and 70.5% state-aware operation accuracy.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 18 of its 63 references that are in the map. First posted on arXiv 11 Sep 2026.
Builds on
18 of 63 references.
Closest ancestors · 1
Same direction, newest first
Other references · 17
- 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,276
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,568
- 2016Efficient and robust approximate nearest neighbor search using Hierarchical Navigable Small World graphscited by 861
- 2024Evaluating Very Long-Term Conversational Memory of LLM Agentscited by 830
- 2025Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memorycited by 779
- 2019Passage Re-ranking with BERTcited by 645
- 2023Cognitive Architectures for Language Agentscited by 429
- 2025Evaluating Memory in LLM Agents via Incremental Multi-Turn Interactionscited by 254
- 2025MEM1: Learning to Synergize Memory and Reasoning for Efficient Long-Horizon Agentscited by 238
- 2025G-Memory: Tracing Hierarchical Memory for Multi-Agent Systemscited by 122
- 2025MemInsight: Autonomous Memory Augmentation for LLM Agentscited by 85
- 2025MemOS: An Operating System for Memory-Augmented Generation (MAG) in Large Language Modelscited by 73
5 more
- 2025Collaborative Memory: Multi-User Memory Sharing in LLM Agents with Dynamic Access Controlcited by 61
- 2025Mem-α: Learning Memory Construction via Reinforcement Learningcited by 55
- 2025LEGOMem: Modular Procedural Memory for Multi-agent LLM Systems for Workflow Automationcited by 40
- 2023Personalized Large Language Model Assistant with Evolving Conditional Memorycited by 25
- 2025CAIM: Development and Evaluation of a Cognitive AI Memory Framework for Long-Term Interaction with Intelligent Agentscited by 7
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026EP-Mem: Elastic Privacy Memory for Social Relationship-Aware LLM Agents
- 2026What to Remember, What to Reveal: Privacy-Aware Memory for Conversational Agents
- 2026Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents
- 2026LLMs Can't Play Hangman: On the Necessity of a Private Working Memory for Language Agents
- 2026Learning from Others, Acting for You: Cross-User Memory Sharing for LLM Agents
- 2026GateMem: Benchmarking Memory Governance in Multi-Principal Shared-Memory Agents
- 2026Governing Evolving Memory in LLM Agents: Risks, Mechanisms, and the Stability and Safety Governed Memory (SSGM) Framework
- 2026ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying