S-07Memory Poisoning

An attacker plants content that gets written to long-term memory — and every future session inherits it as fact.

Key insight

Memory is an injection that persists. Provenance is the antidote: a “fact” that remembers it came from an untrusted webpage can be treated accordingly, forever.

Failure mode

Provenance-free stores: once written, attacker text and user truth are indistinguishable.

S-07Memory Poisoning

Elsewhere in the atlas