Cross-Session Threats in AI Agents: Benchmark, Evaluation, and Algorithms
DGX agentarXiv:2604.21131v1 Announce Type: cross Abstract: AI-agent guardrails are memoryless: each message is judged in isolation, so an adversary who spreads a single attack across dozens of sessions slips p