Agent Memory Is a Surface for Endogenous Authorization Laundering
The paper argues that an agent’s memory can become its authorization policy.
Cerruti, Okamoto, and Erol define “endogenous authorization laundering” as false permissions entering persistent memory and later being treated as valid authority. In EAL-Bench, memory writers created false authority for up to 50.2% of unauthorized requests under incremental updates. Once that false authority existed, executor models acted on it in 98.6% of trials. Safeguards based on source-backed permissions and bounded event sourcing reduced the failure, but also blocked more legitimate actions. HF Daily Papers' note
Cerruti, Okamoto, and Erol define “endogenous authorization laundering” as false permissions entering persistent memory and later being treated as valid authority. In EAL-Bench, memory writers created false authority for up to 50.2% of unauthorized requests under incremental updates. Once that false authority existed, executor models acted on it in 98.6% of trials. Safeguards based on source-backed permissions and bounded event sourcing reduced the failure, but also blocked more legitimate actions. HF Daily Papers' note
score 5