arXiv:2608.21230v1

Agent memory poisoning: 1.2% of the corpus, and both shipped defenses caught nothing

A preprint write-up reports that plainly worded false memories cut accuracy from 0.850 to 0.300, and that screening plus provenance weighting rejected zero of 360 of them.