{"id":"https://openalex.org/W7161680077","doi":"https://doi.org/10.48550/arxiv.2605.17830","title":"Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents","display_name":"Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents","publication_year":2026,"publication_date":"2026-05-18","ids":{"openalex":"https://openalex.org/W7161680077","doi":"https://doi.org/10.48550/arxiv.2605.17830"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.17830","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17830","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.17830","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136460377","display_name":"Ahmad Al-Tawaha","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Al-Tawaha, Ahmad","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062677595","display_name":"Shangding Gu","orcid":"https://orcid.org/0000-0002-2722-3779"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gu, Shangding","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102687891","display_name":"Peizhi Niu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Niu, Peizhi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136486321","display_name":"Ruoxi Jia","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jia, Ruoxi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136504881","display_name":"Ming Jin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jin, Ming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.28040000796318054,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.28040000796318054,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.12370000034570694,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12607","display_name":"Personal Information Management and User Behavior","score":0.08510000258684158,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5439000129699707},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.5364999771118164},{"id":"https://openalex.org/keywords/counterfactual-thinking","display_name":"Counterfactual thinking","score":0.5062999725341797},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.44209998846054077},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.44110000133514404},{"id":"https://openalex.org/keywords/episodic-memory","display_name":"Episodic memory","score":0.4065000116825104},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.3752000033855438},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.3668000102043152}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6195999979972839},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5439000129699707},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5364999771118164},{"id":"https://openalex.org/C108650721","wikidata":"https://www.wikidata.org/wiki/Q1783253","display_name":"Counterfactual thinking","level":2,"score":0.5062999725341797},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.44209998846054077},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.44110000133514404},{"id":"https://openalex.org/C88576662","wikidata":"https://www.wikidata.org/wiki/Q18646","display_name":"Episodic memory","level":3,"score":0.4065000116825104},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.3752000033855438},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.3668000102043152},{"id":"https://openalex.org/C12186640","wikidata":"https://www.wikidata.org/wiki/Q6815743","display_name":"Memory model","level":3,"score":0.36480000615119934},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.3546000123023987},{"id":"https://openalex.org/C3020672099","wikidata":"https://www.wikidata.org/wiki/Q857354","display_name":"Longitudinal data","level":2,"score":0.31949999928474426},{"id":"https://openalex.org/C119907115","wikidata":"https://www.wikidata.org/wiki/Q6815725","display_name":"Memory errors","level":3,"score":0.3158999979496002},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3140999972820282},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.2874000072479248},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.27889999747276306},{"id":"https://openalex.org/C2779795794","wikidata":"https://www.wikidata.org/wiki/Q7315343","display_name":"Reset (finance)","level":2,"score":0.2718999981880188},{"id":"https://openalex.org/C33676613","wikidata":"https://www.wikidata.org/wiki/Q13415176","display_name":"Dimension (graph theory)","level":2,"score":0.25859999656677246},{"id":"https://openalex.org/C2779086471","wikidata":"https://www.wikidata.org/wiki/Q2051704","display_name":"False memory","level":3,"score":0.25760000944137573},{"id":"https://openalex.org/C124681953","wikidata":"https://www.wikidata.org/wiki/Q339062","display_name":"Decomposition","level":2,"score":0.2538999915122986}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.17830","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17830","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.17830","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17830","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.677933394908905,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Safety":[0],"evaluations":[1],"of":[2,212],"memory-equipped":[3],"LLM":[4],"agents":[5,170],"typically":[6],"measure":[7],"within-task":[8],"safety:":[9],"whether":[10,68],"an":[11,69],"agent":[12,34,70,190],"completes":[13],"a":[14,32,40,108,113,127,181,209,231,243,251,259],"single":[15,33,75],"scenario":[16],"safely,":[17],"often":[18],"under":[19],"adversarial":[20],"conditions":[21],"such":[22,160],"as":[23,84,161,242],"prompt":[24],"injection":[25],"or":[26],"memory":[27,44,76,85,97,101,119,152,167,240],"poisoning.":[28],"In":[29],"deployment,":[30],"however,":[31],"serves":[35],"many":[36,88],"independent":[37,89],"tasks":[38,48],"over":[39],"long":[41],"horizon,":[42],"and":[43,147,150,154,176],"accumulated":[45,202],"during":[46],"earlier":[47],"can":[49,255],"affect":[50],"behavior":[51],"on":[52,156,188],"later,":[53],"unrelated":[54],"ones.":[55],"Studying":[56],"this":[57,93,137],"regime":[58],"requires":[59,247],"evaluation":[60],"along":[61],"the":[62,164,173,196,213],"temporal":[63,96,248],"dimension":[64],"across":[65,87,139],"tasks:":[66],"not":[67,250],"is":[71,198,216,220],"safe":[72],"at":[73,121],"any":[74],"state,":[77],"but":[78],"how":[79],"its":[80],"safety":[81,241],"profile":[82],"changes":[83],"accumulates":[86],"interactions.":[90],"We":[91,135],"call":[92],"failure":[94],"mode":[95],"contamination.":[98],"To":[99],"isolate":[100],"exposure":[102,186],"from":[103,222],"stream":[104],"non-stationarity,":[105],"we":[106,228],"introduce":[107],"trigger-probe":[109],"protocol":[110,138],"that":[111,195,217,246,254],"evaluates":[112],"fixed":[114],"probe":[115],"set":[116],"against":[117],"read-only":[118],"snapshots":[120],"varying":[122],"prefix":[123],"lengths,":[124],"together":[125],"with":[126,185,230],"NullMemory":[128,174],"counterfactual":[129],"baseline":[130],"for":[131,238],"identifying":[132],"memory-induced":[133,177,218],"violations.":[134],"apply":[136],"three":[140],"deployment":[141],"scenarios":[142],"spanning":[143],"records,":[144],"memos,":[145],"forms,":[146],"email":[148],"correspondence":[149],"eight":[151],"architectures,":[153],"additionally":[155],"Claw-like":[157],"AI":[158],"agents,":[159],"OpenClaw,":[162],"using":[163],"platform's":[165],"native":[166],"mechanism.":[168],"Memory-enabled":[169],"consistently":[171],"exceed":[172],"baseline,":[175],"violation":[178],"rates":[179],"show":[180],"robust":[182],"upward":[183],"trend":[184],"length":[187],"both":[189],"classes.":[191],"Order-randomization":[192],"experiments":[193],"indicate":[194],"effect":[197],"driven":[199],"primarily":[200],"by":[201,258],"content":[203],"rather":[204],"than":[205],"encounter":[206],"order.":[207],"Finally,":[208],"structural":[210],"consequence":[211],"event":[214],"decomposition":[215],"risk":[219],"detectable":[221],"retrieval":[223],"state":[224],"before":[225],"generation,":[226],"which":[227],"confirm":[229],"high-recall":[232],"diagnostic":[233],"monitor.":[234],"Our":[235],"results":[236],"argue":[237],"treating":[239],"longitudinal":[244],"property":[245,253],"evaluation,":[249],"single-state":[252],"be":[256],"captured":[257],"snapshot.":[260]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-20T00:00:00"}