SOURCE-LINKED INTELLIGENCE

Agent Memory Is a Surface for Endogenous Authorization Laundering

arXiv · AI, language, vision and robotics · article · Sep 1, 2026 · UTC

Long-running LLM agents rely on persistent memory to carry state across interactions, including permissions, restrictions, and revocations. When memory misrepresents this evolving authorization state, the agent's own records can grant authority that the underlying history never permitted, resulting in misaligned behavior without any external attacks. We term this failure endogenous authorization laundering, where spurious permissions written into memory lead to unauthorized actions as their provenance is washed away. We then introduce EAL-Bench, which measures how accurately persistent memory

Read original source ↗ Open in workspace

recordType

paper

region

Global