The Flow has not summarised this story yet — read it at Hugging Face Trending Papers.
MutMem‑V2 builds on the original MutMem‑V1 by providing a complete portable verification contract and a clean‑install reproduction path for persistent agent memory. It defines exact canonical bytes, domain‑separated commitments, mandatory recall‑evidence, and other security primitives, and releases a protocol with 18 object schemas, 39 recall vectors, 15 mutation vectors, and 37 closed recall failure reasons. Independent Node and Python implementations agree on all 72 structural and cryptographic terminals, and a production‑conformance corpus confirms 42/42 cases across 28 required classes, demonstrating reproducible evidence and portable integrity under stated assumptions.
arXiv:2608. 02843v1 Announce Type: cross Abstract: Persistent agent memory must adapt as later outcomes change earlier evidence, yet mutable retrieval weights create an attribution problem: reviewers must distinguish authorized adaptation from database tampering.
arXiv:2604. 16548v2 Announce Type: replace-cross Abstract: The emergence of writable, cross-session persistent memory in LLM agents introduces a qualitatively different threat landscape from conventional input-centric security concerns, characterized by three properties: persistence, statefulness, and propagation.
arXiv:2609. 00546v1 Announce Type: cross Abstract: Agent systems are commonly described by the model and harness that currently produce their behavior.
arXiv:2607. 27080v1 Announce Type: cross Abstract: Memory systems allow agents to retain and reuse information from past interactions, but they can also let malicious content persist.
arXiv:2607. 23929v1 Announce Type: new Abstract: LLM agents increasingly coordinate through persistent shared memory: one agent's write becomes another agent's premise, and eventually a tool call with real side effects.