Ivan Verbovoy

Rank-Bounded Memory: Self-Poisoning and Attribution Laundering in LLM Agents

An agent that consolidates its own notes launders where its claims came from. With no attacker at all, 24–33% of its speculations resurface as the owner's words or as sensor facts, at the very first rewrite, across flat notes, a self-edit block and three production memory systems...

Rank-Bounded Memory: Self-Poisoning and Attribution Laundering in LLM Agents

An agent that consolidates its own notes launders where its claims came from. With no attacker at all, 24–33% of its speculations resurface as the owner's words or as sensor facts, at the very first rewrite, across flat notes, a self-edit block and three production memory systems...