Persistent memory as an attack surface

AI assistants stay useful by keeping state across sessions — some systems compact a long conversation into a summary, and others share a semantic cache so similar questions get fast answers. Both are attack surfaces: an attacker can slip malicious content into what gets stored during context compaction, or poison a shared cache, so later sessions inherit tampered behaviour even when the attacker is no longer present.