paper-with-me

Papers

When Memory Becomes Authority: Benchmarking Authority Collapse at the Memory Consolidation Boundary

2026-08-03 · Qiuyang Zhan, Rui Zhang, Sheng Guo, Lepeng Zhao, Zhuotao Liu arxiv

Persistent memory allows (self-evolving) LLM agents to adapt across tasks by consolidating heterogeneous interaction histories into reusable facts, preferences, observations, and rules. Yet consolidation also imposes an implicit authorization boundary: it determines whether stored information may later be consumed as a user fact, an attested observation, or a standing instruction. We identify authority collapse, in which consolidation preserves a claim while erasing the source constraints governing its authorized use, causing the stored memory to imply greater authority than its source permits. We introduce AuthMem-Bench, a controlled paired benchmark that holds the focal claim and downstream task fixed while varying only source authority. It evaluates write-time collapse, downstream authorization errors, and automatic authority preservation. Across seven consolidators based on widely used agent-memory systems and seven LLM backbones, we observe authority collapse in 48 of 49 evaluated configurations. In a controlled action-grounded evaluation, collapsed memories without authority metadata yield a mean unauthorized-action rate of 50.3%. In an end-to-end evaluation, automatically predicted and persisted authority labels reduce the observed unauthorized-action rate from 16.9% to 0.0%, while benign task success remains essentially unchanged. These findings show that memory-driven adaptation must preserve not only what was learned, but also the authority under which it may be reused.

📄 PDF Abstract BibTeX arXiv:2608.01679

Code (0)

등록된 구현이 없습니다.

Similar Papers 제목 키워드 기반

Operationalizing Reconstructive Authority: Runtime Construction, Dependency Resolution, and Execution Gating in Autonomous Agent Systems

2026-04-24 · Marcelo Fernandez - TraslaIA arxiv

Autonomous agent systems fail not only due to incorrect decisions, but due to executing decisions whose authority no longer holds at runtime. Prior work defined Reconstructive Authority (RAM) as a condition for valid exe…

Agent Memory Is a Surface for Endogenous Authorization Laundering

2026-09-01 · Tommaso Cerruti, Mika Okamoto, Ansel Kaplan Erol hf

Long-running LLM agents rely on persistent memory to carry state across interactions, including permissions, restrictions, and revocations. When memory misrepresents this evolving authorization state, the agent's own rec…

AIRGuard: Guarding Agent Actions with Runtime Authority Control

2026-05-27 · Suliu Qin, Haomin Zhuang, Yujun Zhou, Yufei Han 외 arxiv

Tool-using language agents turn model decisions into external side effects: they read files, run scripts, call APIs, send messages, and invoke Model Context Protocol tools. This makes agent attacks different from jailbre…

Authority Inversion in LLM-Mediated Ubiquitous Systems: When Models Trust Users Over Sensors

2026-04-28 · Long Zhang, Zi-bo Qin, Wei-neng Chen arxiv

Large language models (LLMs) increasingly fuse heterogeneous inputs in ubiquitous systems. Yet, how LLMs implicitly allocate authority when sensor measurements and user claims conflict remains unexamined, raising critica…

Joint Modeling of Topics, Citations, and Topical Authority in Academic Corpora

2017-06-02 · TACL 2017 1 · Jooyeon Kim, Dongwoo Kim, Alice Oh

Much of scientific progress stems from previously published findings, but searching through the vast sea of scientific publications is difficult. We often rely on metrics of scholarly authority to find the prominent auth…