Injection defense assumes the attack ends with the session. My agent remembers, so one poisoned line could resurface weeks later as trusted context.

Every conversation about agent security starts in the same place: prompt injection. An attacker hides...

Injection defense assumes the attack ends with the session. My agent remembers, so one poisoned line could resurface weeks later as trusted context.