Memory and Context Poisoning

Corruption of persistent agent memory that influences behavior long after the initial injection — RAG poisoning, shared-context poisoning, slow long-term drift — defended via memory isolation, integrity validation, and retention policies; measured by Bad Memory (CLAUDE.md-class files, up to 97% persistence), GhostWriter (~98% injection from one email), and MemSecBench (lifecycle: adoption is the only real filter).