State persistence is the ability of an application or agent to retain records of past actions, goals, or context across sessions. For agents, this continuity supports long-term planning and coordination, distinguishing them from systems that react only to the current prompt or session. section 8.19 section 8.17
Persistence also changes the system’s risk profile:
- Corrupted or malicious memories can shape later decisions, including actions that appear legitimate to the agent but violate the user’s intent. section 8.19
- Sensitive information, including identifiers, credentials, and preferences, may resurface through unintended generation or manipulation. section 8.19
- Prompt injection becomes more consequential when hidden instructions enter through files, images, web pages, or other external content and persist across sessions. section 8.22
Responsible persistence therefore requires deciding what to retain, discard, or expose, while combining input filtering, logging, and cryptographic verification. Without safeguards, memory can become a long-term liability rather than an asset. section 8.19 section 8.22
