{"id":"https://openalex.org/W7161722315","doi":"https://doi.org/10.48550/arxiv.2605.16746","title":"State Contamination in Memory-Augmented LLM Agents","display_name":"State Contamination in Memory-Augmented LLM Agents","publication_year":2026,"publication_date":"2026-05-16","ids":{"openalex":"https://openalex.org/W7161722315","doi":"https://doi.org/10.48550/arxiv.2605.16746"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.16746","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16746","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.16746","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136458625","display_name":"Yian Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Yian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136492996","display_name":"Agam Goyal","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Goyal, Agam","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127863965","display_name":"Yuen Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Yuen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136474349","display_name":"Hari Sundaram","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sundaram, Hari","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.16949999332427979,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.16949999332427979,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10462","display_name":"Reinforcement Learning in Robotics","score":0.06880000233650208,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.06350000202655792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/counterfactual-thinking","display_name":"Counterfactual thinking","score":0.5331000089645386},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5059000253677368},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.44670000672340393},{"id":"https://openalex.org/keywords/downstream","display_name":"Downstream (manufacturing)","score":0.42080000042915344},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.38519999384880066},{"id":"https://openalex.org/keywords/automatic-summarization","display_name":"Automatic summarization","score":0.36489999294281006},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.3327000141143799}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5999000072479248},{"id":"https://openalex.org/C108650721","wikidata":"https://www.wikidata.org/wiki/Q1783253","display_name":"Counterfactual thinking","level":2,"score":0.5331000089645386},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5059000253677368},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.44670000672340393},{"id":"https://openalex.org/C2776207758","wikidata":"https://www.wikidata.org/wiki/Q5303302","display_name":"Downstream (manufacturing)","level":2,"score":0.42080000042915344},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4124000072479248},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.38519999384880066},{"id":"https://openalex.org/C170858558","wikidata":"https://www.wikidata.org/wiki/Q1394144","display_name":"Automatic summarization","level":2,"score":0.36489999294281006},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.3327000141143799},{"id":"https://openalex.org/C144745244","wikidata":"https://www.wikidata.org/wiki/Q4927286","display_name":"Blocking (statistics)","level":2,"score":0.2904999852180481},{"id":"https://openalex.org/C2984679396","wikidata":"https://www.wikidata.org/wiki/Q7602986","display_name":"State dependent","level":2,"score":0.2822999954223633},{"id":"https://openalex.org/C2910804846","wikidata":"https://www.wikidata.org/wiki/Q274160","display_name":"Chemical toxicity","level":3,"score":0.2671000063419342},{"id":"https://openalex.org/C2985957978","wikidata":"https://www.wikidata.org/wiki/Q492","display_name":"Human memory","level":3,"score":0.26170000433921814},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.2606000006198883},{"id":"https://openalex.org/C29730261","wikidata":"https://www.wikidata.org/wiki/Q274160","display_name":"Toxicity","level":2,"score":0.2603999972343445},{"id":"https://openalex.org/C2780665704","wikidata":"https://www.wikidata.org/wiki/Q959298","display_name":"Intervention (counseling)","level":2,"score":0.25130000710487366}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.16746","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16746","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.16746","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16746","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7797764539718628,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"LLM":[0],"agents":[1,197],"increasingly":[2],"rely":[3],"on":[4,25,31,123,165],"persistent":[5,217],"state,":[6],"including":[7],"transcripts,":[8],"summaries,":[9],"retrieved":[10],"context,":[11,207],"and":[12,36],"memory":[13,46,56,87,124,153],"buffers,":[14],"to":[15,101],"support":[16],"long-horizon":[17],"interaction.":[18],"This":[19],"makes":[20],"safety":[21,194],"depend":[22],"not":[23],"only":[24,181],"individual":[26],"model":[27],"outputs,":[28],"but":[29],"also":[30],"what":[32],"an":[33],"agent":[34],"stores":[35],"later":[37],"reuses.":[38],"We":[39,158],"study":[40],"a":[41,127,202],"failure":[42],"mode":[43],"we":[44,83,110],"call":[45],"laundering:":[47],"toxic":[48,62,169],"or":[49,71],"adversarial":[50],"context":[51],"can":[52,89,185],"be":[53,199],"compressed":[54,152,215],"into":[55,216],"summaries":[57,88],"that":[58,74,85,126,137,161,193],"no":[59],"longer":[60],"appear":[61],"under":[63],"standard":[64],"detectors,":[65],"while":[66,95,151],"still":[67],"preserving":[68],"hostile":[69],"framing":[70],"conflict":[72],"structure":[73],"influences":[75],"future":[76],"generations.":[77],"Using":[78],"paired":[79],"counterfactual":[80],"multi-agent":[81],"rollouts,":[82],"show":[84,136],"toxic-origin":[86],"remain":[90],"below":[91],"common":[92],"toxicity":[93,99,138],"thresholds":[94],"nevertheless":[96],"increasing":[97],"downstream":[98,119,149],"relative":[100],"matched":[102],"neutral":[103],"baselines.":[104],"To":[105],"measure":[106],"this":[107],"hidden":[108,155,176],"influence,":[109],"introduce":[111],"the":[112,175,182],"sub-threshold":[113,156],"propagation":[114,177],"gap":[115],"(SPG),":[116],"which":[117],"quantifies":[118],"behavioral":[120],"differences":[121],"conditioned":[122],"states":[125],"deployed":[128],"monitor":[129],"would":[130],"classify":[131],"as":[132,201],"safe.":[133],"Our":[134],"experiments":[135],"propagates":[139],"through":[140],"distinct":[141],"state":[142,170],"channels:":[143],"raw":[144],"transcript":[145],"reuse":[146],"drives":[147],"overt":[148],"toxicity,":[150],"carries":[154],"influence.":[157],"further":[159],"find":[160],"mitigation":[162],"depends":[163],"critically":[164],"intervention":[166],"placement.":[167],"Sanitizing":[168],"before":[171,211],"summarization":[172],"substantially":[173],"reduces":[174],"gap,":[178],"whereas":[179],"cleaning":[180],"completed":[183],"summary":[184],"leave":[186],"laundered":[187],"influence":[188],"intact.":[189],"These":[190],"results":[191],"suggest":[192],"in":[195],"memory-augmented":[196],"should":[198],"treated":[200],"state-control":[203],"problem":[204],"over":[205],"evolving":[206],"with":[208],"sanitization":[209],"applied":[210],"unsafe":[212],"information":[213],"is":[214],"memory.":[218]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-20T00:00:00"}