{"id":"https://openalex.org/W7163667864","doi":"https://doi.org/10.48550/arxiv.2606.06054","title":"Beyond Similarity: Trustworthy Memory Search for Personal AI Agents","display_name":"Beyond Similarity: Trustworthy Memory Search for Personal AI Agents","publication_year":2026,"publication_date":"2026-06-04","ids":{"openalex":"https://openalex.org/W7163667864","doi":"https://doi.org/10.48550/arxiv.2606.06054"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.06054","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.06054","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.06054","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137956775","display_name":"Jiawen Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Jiawen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122084938","display_name":"Kejia Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Kejia","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137959660","display_name":"Jiachen Ma","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ma, Jiachen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123216992","display_name":"Yangfan Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Yangfan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137972629","display_name":"Lipeng He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Lipeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137969591","display_name":"Yechao Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yechao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137998118","display_name":"Jian Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Jian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137988651","display_name":"Xiaohu Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Xiaohu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138011826","display_name":"Tianwei Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Tianwei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137984683","display_name":"Ruoxi Jia","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jia, Ruoxi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.18479999899864197,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.18479999899864197,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.1624000072479248,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.05550000071525574,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/memory-safety","display_name":"Memory safety","score":0.5691999793052673},{"id":"https://openalex.org/keywords/semantic-memory","display_name":"Semantic memory","score":0.48170000314712524},{"id":"https://openalex.org/keywords/memory-map","display_name":"Memory map","score":0.4375},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.3790999948978424},{"id":"https://openalex.org/keywords/auxiliary-memory","display_name":"Auxiliary memory","score":0.37279999256134033},{"id":"https://openalex.org/keywords/memory-errors","display_name":"Memory errors","score":0.3725000023841858},{"id":"https://openalex.org/keywords/personalization","display_name":"Personalization","score":0.3668000102043152},{"id":"https://openalex.org/keywords/memory-model","display_name":"Memory model","score":0.3635999858379364},{"id":"https://openalex.org/keywords/trustworthiness","display_name":"Trustworthiness","score":0.3499999940395355}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7633000016212463},{"id":"https://openalex.org/C28180684","wikidata":"https://www.wikidata.org/wiki/Q4080983","display_name":"Memory safety","level":3,"score":0.5691999793052673},{"id":"https://openalex.org/C197914299","wikidata":"https://www.wikidata.org/wiki/Q18650","display_name":"Semantic memory","level":3,"score":0.48170000314712524},{"id":"https://openalex.org/C74426580","wikidata":"https://www.wikidata.org/wiki/Q719484","display_name":"Memory map","level":3,"score":0.4375},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.3790999948978424},{"id":"https://openalex.org/C82687282","wikidata":"https://www.wikidata.org/wiki/Q66221","display_name":"Auxiliary memory","level":2,"score":0.37279999256134033},{"id":"https://openalex.org/C119907115","wikidata":"https://www.wikidata.org/wiki/Q6815725","display_name":"Memory errors","level":3,"score":0.3725000023841858},{"id":"https://openalex.org/C183003079","wikidata":"https://www.wikidata.org/wiki/Q1000371","display_name":"Personalization","level":2,"score":0.3668000102043152},{"id":"https://openalex.org/C12186640","wikidata":"https://www.wikidata.org/wiki/Q6815743","display_name":"Memory model","level":3,"score":0.3635999858379364},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.3499999940395355},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.3476000130176544},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.33820000290870667},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.32350000739097595},{"id":"https://openalex.org/C171675096","wikidata":"https://www.wikidata.org/wiki/Q1143380","display_name":"Extended memory","level":4,"score":0.30809998512268066},{"id":"https://openalex.org/C88576662","wikidata":"https://www.wikidata.org/wiki/Q18646","display_name":"Episodic memory","level":3,"score":0.3061999976634979},{"id":"https://openalex.org/C57863822","wikidata":"https://www.wikidata.org/wiki/Q905488","display_name":"Flat memory model","level":4,"score":0.3009999990463257},{"id":"https://openalex.org/C30390489","wikidata":"https://www.wikidata.org/wiki/Q4680748","display_name":"Adaptive memory","level":3,"score":0.2987000048160553},{"id":"https://openalex.org/C67448173","wikidata":"https://www.wikidata.org/wiki/Q254217","display_name":"Collective memory","level":2,"score":0.2888999879360199},{"id":"https://openalex.org/C2779602883","wikidata":"https://www.wikidata.org/wiki/Q15544750","display_name":"Memory architecture","level":2,"score":0.2847999930381775},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.2694000005722046},{"id":"https://openalex.org/C63511323","wikidata":"https://www.wikidata.org/wiki/Q908936","display_name":"Interleaved memory","level":4,"score":0.2685999870300293},{"id":"https://openalex.org/C100660578","wikidata":"https://www.wikidata.org/wiki/Q18733","display_name":"Recall","level":2,"score":0.2639999985694885},{"id":"https://openalex.org/C133875982","wikidata":"https://www.wikidata.org/wiki/Q764810","display_name":"Shared memory","level":2,"score":0.26339998841285706},{"id":"https://openalex.org/C153247305","wikidata":"https://www.wikidata.org/wiki/Q835713","display_name":"Memory address","level":3,"score":0.2563000023365021},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.2502000033855438}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.06054","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.06054","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.06054","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.06054","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7198048233985901,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Personal":[0],"AI":[1,81],"agents":[2,128],"increasingly":[3],"rely":[4],"on":[5],"long-term":[6,111,225],"memory":[7,16,24,49,73,87,112,153,157,173,197,205,210,226],"to":[8,27,56,138,195],"provide":[9],"persistent":[10,102],"personalization":[11],"across":[12],"sessions.":[13],"However,":[14],"existing":[15],"pipelines":[17],"are":[18],"largely":[19],"driven":[20],"by":[21],"semantic":[22],"similarity:":[23],"data":[25],"close":[26],"the":[28,36,139,171,176],"current":[29],"query":[30],"is":[31,113,168],"retrieved":[32],"and":[33,92,104,131,151,163,175,215],"injected":[34],"into":[35,203],"model":[37],"context.":[38],"This":[39],"creates":[40],"a":[41,46,76,97,116,120,149,164,191],"critical":[42],"trustworthiness":[43],"gap,":[44],"since":[45],"semantically":[47],"related":[48],"may":[50],"still":[51],"be":[52],"contextually":[53],"inappropriate,":[54],"leading":[55],"threats":[57,222],"such":[58],"as":[59,75],"cross-domain":[60],"leakage,":[61],"sycophancy,":[62],"tool-call":[63],"drift,":[64],"or":[65,185],"memory-induced":[66,221],"jailbreaks.":[67],"In":[68],"this":[69],"paper,":[70],"we":[71,146],"study":[72],"search":[74,202],"trust":[77],"boundary":[78],"in":[79],"personal":[80],"agents.":[82],"We":[83],"evaluate":[84],"representative":[85],"agentic":[86],"frameworks,":[88,211],"including":[89],"A-Mem,":[90],"Mem0,":[91],"MemOS,":[93],"together":[94],"with":[95,101,159],"OpenClaw,":[96],"real-world":[98,212],"personal-agent":[99],"environment":[100],"state":[103],"tool-use":[105],"capability.":[106],"Our":[107],"results":[108],"show":[109],"that":[110,124],"not":[114],"merely":[115],"utility":[117],"layer,":[118],"but":[119],"durable":[121],"control":[122],"channel":[123],"can":[125],"reshape":[126],"how":[127],"interpret":[129],"tasks":[130],"execute":[132],"actions,":[133],"leaving":[134],"them":[135],"highly":[136],"susceptible":[137],"aforementioned":[140],"threats.":[141],"To":[142],"mitigate":[143],"these":[144],"vulnerabilities,":[145],"propose":[147],"MemGate,":[148],"lightweight":[150],"deployable":[152],"plug-in":[154],"for":[155],"trustworthy":[156],"search,":[158],"only":[160],"9M":[161],"parameters":[162],"35.1MB":[165],"footprint.":[166],"MemGate":[167,219],"inserted":[169],"between":[170],"vector":[172],"store":[174],"backbone":[177],"LLM,":[178],"requiring":[179],"no":[180],"LLM":[181,187,217],"modification,":[182],"memory-database":[183],"rewriting,":[184],"inference-time":[186],"judge.":[188],"It":[189],"applies":[190],"query-conditioned":[192],"neural":[193],"gate":[194],"candidate":[196],"representations,":[198],"turning":[199],"raw":[200],"similarity":[201],"task-conditioned":[204],"admission.":[206],"Across":[207],"multiple":[208],"mainstream":[209],"agent":[213],"settings,":[214],"diverse":[216],"backbones,":[218],"reduces":[220],"while":[223],"preserving":[224],"utility.":[227]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-06T00:00:00"}