The DOI matches its DataCite record; 8 of the 8 references it cites were found in a registry or an index.
Governing Evolving Memory in LLM Agents: Risks, Mechanisms, and the Stability and Safety Governed Memory (SSGM) Framework
Open accessAbstract
Long-term memory has emerged as a foundational component of autonomous Large Language Model (LLM) agents, enabling continuous adaptation, lifelong multimodal learning, and sophisticated reasoning. However, as memory systems transition from static retrieval databases to dynamic, agentic mechanisms, critical concerns regarding memory governance, semantic drift, and privacy vulnerabilities have surfaced. While recent surveys have focused extensively on memory retrieval efficiency, they largely overlook the emergent risks of memory corruption in highly dynamic environments. To address these emerging challenges, we propose the Stability and Safety-Governed Memory (SSGM) framework, a conceptual governance architecture. SSGM decouples memory evolution from execution by enforcing consistency verification, temporal decay modeling, and dynamic access control prior to any memory consolidation. Through formal analysis and architectural decomposition, we show how SSGM can mitigate topology-induced knowledge leakage where sensitive contexts are solidified into long-term storage, and help prevent semantic drift where knowledge degrades through iterative summarization. Ultimately, this work provides a comprehensive taxonomy of memory corruption risks and establishes a robust governance paradigm for deploying safe, persistent, and reliable agentic memory systems.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“What all four have in common is that they govern access to a memory entry as a whole - by owner, role, or tool-call legitimacy - rather than by the individual columns that contributed to it. That means none of them can tell that a permitted entry embeds a forbidden column.”
From Lineage-Aware Memory Governance: A Derivation-Gated Framework for Privacy-Preserving Column-Level Access Control in Enterprise AI Agents (2026) · cites this paper as [8]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The Rise and Potential of Large Language Model Based Agents: A Survey
Xi, Z., Chen, W., Guo, X., He, W., Ding, Y., Hong, B., Zhang, M., Wang, J., Jin, S., Zhou, E., et al. (2023) · arXiv · doi:10.48550/arxiv.2309.07864 · Cited by 972
The rise and potential of large language model based agents: a survey
Xi, Z., Chen, W., Guo, X., He, W., Ding, Y., Hong, B., Zhang, M., Wang, J., Jin, S., Zhou, E., et al. (2025) · Science China Information Sciences · doi:10.1007/s11432-024-4222-0 · Cited by 970
Memp: Exploring Agent Procedural Memory
Fang, R., Liang, Y., Wang, X., Wu, J., Qiao, S., Xie, P., Huang, F., Chen, H., & Zhang, N. (2026) · Findings of the Association for Computational Linguistics: ACL 2026 · doi:10.18653/v1/2026.findings-acl.866 · Cited by 174
What Deserves Memory: Adaptive Memory Distillation for LLM Agents
Ma, W., Nan, J., & Wu, W. (2026) · Proceedings of the 64th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers) · doi:10.18653/v1/2026.acl-long.1607 · Cited by 89 · cited 2×
“Similarly, Nemori (Nan et al., 2025) draws upon cognitive science to introduce a self-organizing memory policy: the agent internalizes rules for maintaining consistency and organization (such as periodically reconciling new information with old) without external supervision, thereby gradually improving memory coherenc…”
Zep: A Temporal Knowledge Graph Architecture for Agent Memory
Rasmussen, P., Paliychuk, P., Beauvais, T., Ryan, J., & Chalef, D. (2025) · arXiv · doi:10.48550/arxiv.2501.13956 · Cited by 9
Can an LLM Induce a Graph? Investigating Memory Drift and Context Length
Yousuf, R. B., Khatri, A., Xu, S., Sharma, M., & Ramakrishnan, N. (2025) · 2025 IEEE International Conference on Knowledge Graph (ICKG) · doi:10.1109/ickg66886.2025.00056 · cited 1×
“Standard LLMs rely on a fixed-length context window that prevents indefinite information retention (Zhong et al., 2024; Yousuf et al., 2025; OpenAI, 2023).”
Collaborative Memory: Multi-User Memory Sharing in LLM Agents with Dynamic Access Control
Rezazadeh, A., Li, Z., Lou, A., Zhao, Y., Wei, W., & Bao, Y. (2025) · arXiv · doi:10.48550/arxiv.2505.18279 · cited 2×
“Instead, the Read Filtering Gate must inject identity-based constraints (e.g., Attribute-Based Access Control, ABAC) directly into the query execution layer (Rezazadeh et al., 2025).”
WorldMM: Dynamic Multimodal Memory Agent for Long Video Reasoning
Yeo, W., Kim, K., Yoon, J., & Hwang, S. J. (2025) · arXiv · doi:10.48550/arxiv.2512.02425 · cited 1×
“For instance, VideoARM (Yin et al., 2025) dynamically constructs hierarchical memory to reason over long-form videos without exhaustive preprocessing, while WorldMM (Yeo et al., 2025) continuously tracks spatiotemporal states.”
Research works printed but not linked: 48
- Qingyan Ai, Yuhang Tang, Chuan Wang, Jiahui Long, Weijie Su, and Yiting Liu. 2025. Memorybench: A benchmark for memory and continual learning in llm systems. arXiv preprint arXiv:2510.17281. · arXiv
- Saad Alqithami. 2025. Forgetful but faithful: A cognitive memory architecture and benchmark for privacy-aware generative agents. arXiv preprint arXiv:2512.12856. · arXiv
- Archana Biswal, Cao Lei, Xiatian Qin, Ang Li, Brah- midesh Narayanaswamy, and Tim Kraska. 2026. AgentSM: Semantic memory for agentic text-to- SQL. arXiv preprint arXiv:2601.15709. · arXiv
- Chunliang Chen, Ming Guan, Xiao Lin, Luxi Lin, Jiaxu Li, Qiyi Wang, Xiangyu Chen, Jixiang Luo, Changzhi Sun, Dell Zhang, and Xuelong Li. 2025. TeleMem: Building long-term and mul- timodal memory for agentic AI. arXiv preprint arXiv:2501.07722. · arXiv
- Pratham Chhikara, Dhyey Khant, Shivam Aryan, Tarun Singh, and Divyansh Yadav. 2025. Mem0: Building production-ready ai agents with scalable long-term memory. arXiv preprint arXiv:2504.19413. · arXiv
- Xueying Du, Liang Li, Dawei Zhang, and Lin Song. 2025. Memr 3 : Memory retrieval via reflec- tive reasoning for llm agents. arXiv preprint arXiv:2512.20237. · arXiv
- Yunfan Gao, Yun Xiong, Xinyu Gao, Kangxiang Jia, Jinliu Pan, Yuxi Bi, Yi Dai, Jiawei Sun, Hao Wang, and Haofen Wang. 2023. Retrieval-augmented gen- eration for large language models: A survey. arXiv preprint arXiv:2312.10997, 2(1). · arXiv
- Kai Greshake, Sahar Abdelnabi, Shailesh Mishra, Christoph Endres, Thorsten Holz, and Mario Fritz. 2023. Not what you've signed up for: Compromis- ing real-world llm-integrated applications with indi- rect prompt injection. In Proceedings of the 16th ACM Workshop on Artificial Intelligence and Secu- rity, pages 79-90.
- Bernal Jiménez Gutiérrez, Yiheng Shu, Yu Gu, Michi- hiro Yasunaga, and Yu Su. 2024. HippoRAG: Neu- robiologically inspired long-term memory for large language models. In Advances in Neural Informa- tion Processing Systems, volume 37.
- Dong Han, Clement Couturier, David M. Diaz, Xing Zhang, Volker Rühle, and S. Rajmohan. 2025. Legomem: Modular procedural memory for multi- agent llm systems for workflow automation. arXiv preprint arXiv:2510.04851. · arXiv
- Chenxu Hu, Jie Fu, Chenzhuang Du, Simian Luo, Junbo Zhao, and Hang Zhao. 2023. Chatdb: Aug- menting llms with databases as their symbolic mem- ory. arXiv preprint arXiv:2306.03901. · arXiv
- Yuting Hu, Sijie Liu, Yuhang Yue, Guosheng Zhang, Boxiang Liu, Fang Zhu, Jian Lin, Hao Guo, Shuhan Dou, Zhi Xi, et al. 2025. Memory in the age of ai agents. arXiv preprint arXiv:2512.13564. · arXiv
- Ziyu Huang, Zhi Tian, Qian Guo, Fan Zhang, Yu Zhou, Dawei Jiang, Zhu Xie, and Xia Zhou. 2025. Licomemory: Lightweight and cognitive agentic memory for efficient long-term reasoning. arXiv preprint arXiv:2511.01448. · arXiv
- Yuge Huo, Yining Lu, Zhen Zhang, Hao Chen, and Yan Lin. 2026. Atommem: Learnable dynamic agen- tic memory with atomic memory operation. arXiv preprint arXiv:2601.08323. · arXiv
- Dawei Jiang, Yuting Li, Guang Li, and Bo Li. 2026. Magma: A multi-graph based agentic mem- ory architecture for ai agents. arXiv preprint arXiv:2601.03236. · arXiv
- Patrick Lewis, Ethan Perez, Aleksandra Piktus, Fabio Petroni, Vladimir Karpukhin, Naman Goyal, Hein- rich Küttler, Mike Lewis, Wen-tau Yih, Tim Rock- täschel, et al. 2020. Retrieval-augmented generation for knowledge-intensive nlp tasks. In Advances in neural information processing systems, volume 33, pages 9459-9474.
- Jinbo Liu, Defu Cao, Yifei Wei, Tianyao Su, Yuan Liang, Yushun Dong, Yan Liu, Yue Zhao, and Xiyang Hu. 2025a. Topology matters: Measuring memory leakage in multi-agent llms. arXiv preprint arXiv:2512.04668. · arXiv
- Junming Liu, Yifei Sun, Weihua Cheng, Haodong Lei, Yirong Chen, Licheng Wen, Xuemeng Yang, Daocheng Fu, Pinlong Cai, Nianchen Deng, Yi Yu, Shuyue Hu, Botian Shi, and Ding Wang. 2025b. MemVerse: Multimodal memory for lifelong learn- ing agents. arXiv preprint arXiv:2512.03627. · arXiv
- Aman Madaan, Niket Tandon, Prakhar Gupta, Skyler Hallinan, Luyu Gao, Sarah Wiegreffe, Uri Alon, Nouha Dziri, Shrimai Prabhumoye, Yiming Yang, et al. 2023. Self-refine: Iterative refinement with self-feedback. In Advances in Neural Informa- tion Processing Systems, volume 36, pages 46534- 46594.
- Andrea Matarazzo and Riccardo Torlone. 2025. A sur- vey on large language models with some insights on their capabilities and limitations. arXiv preprint arXiv:2501.04040. · arXiv
- Hongze Mi, Yibo Feng, WenJie Lu, Song Cao, Jinyuan Li, Yanming Li, Xuelin Zhang, Haotian Luo, Songyang Peng, He Cui, Tengfei Tian, Jun Fang, Hua Chai, and Naiqiang Tan. 2026. Darwinian memory: A training-free self-regulating memory system for gui agent evolution. arXiv preprint arXiv:2601.22528. · arXiv
- Jiahui Nan, Wei Ma, Wei Wu, and Yuhong Chen. 2025. Nemori: Self-organizing agent memory inspired by cognitive science. arXiv preprint arXiv:2508.03341. · arXiv
- Hongqiu Ni, Jiabao Zhang, Guopeng Li, Zilong Wang, Ruiqi Wu, Chi Zhang, and Haisheng Tan. 2025. Astraea: A state-aware scheduling engine for llm- powered agents. arXiv preprint arXiv:2512.14142. · arXiv
- Charles Packer, Sarah Wooders, Kevin Lin, Vivian Fang, Shishir G. Patil, Ion Stoica, and Joseph E. Gonzalez. 2024. Memgpt: Towards llms as oper- ating systems. arXiv preprint arXiv:2310.08560. · arXiv
- Joon Sung Park, Joseph O'Brien, Carrie J. Cai, Mered- ith Ringel Morris, Percy Liang, and Michael S. Bernstein. 2023. Generative agents: Interactive sim- ulacra of human behavior. In Proceedings of the 36th annual acm symposium on user interface soft- ware and technology, pages 1-22.
- Ofir Press, Noah A. Smith, and Mike Lewis. 2021. Train short, test long: Attention with linear biases enables input length extrapolation. arXiv preprint arXiv:2108.12409. · arXiv
- Hong Qian et al. 2024. Memorag: Boosting long con- text processing with global memory-enhanced re- trieval augmentation. In Proceedings of the ACM Web Conference 2025.
- Abhinav Rath. 2026. Agent drift: Quantifying behavioral degradation in multi-agent llm sys- tems over extended interactions. arXiv preprint arXiv:2601.04170. · arXiv
- Saksham Sarin, Lakshay Singh, Bhaskar Sarmah, and Dipti Mehta. 2025. Memoria: A scalable agentic memory framework for personalized conversational ai. In 2025 5th International Conference on AI-ML- Systems, pages 32-39.
- Noah Shinn, Federico Cassano, Ashwin Gopinath, Karthik Narasimhan, and Shunyu Yao. 2023. Re- flexion: Language agents with verbal reinforcement learning. In Advances in Neural Information Pro- cessing Systems, volume 36, pages 8634-8652.
- Theodore Sumers, Shunyu Yao, Karthik R. Narasimhan, and Thomas L. Griffiths. 2023. Cognitive architectures for language agents. Transactions on Machine Learning Research.
- Volker Tresp, Sahand Sharifzadeh, Hang Li, Dario Konopatzki, and Yunpu Ma. 2023. The tensor brain: A unified theory of perception, memory, and seman- tic decoding. Neural Computation, 35(2):156-227.
- Bin Wang, Wei He, Shu Zeng, Zhi Xiang, Yue Xing, Jian Tang, and Peng He. 2025. Unveiling privacy risks in llm agent memory. In Proceedings of the 63rd Annual Meeting of the Association for Compu- tational Linguistics, pages 25241-25260.
- Guanzhi Wang, Yuandong Xie, Yunfan Jiang, Ajay Mandlekar, Chaowei Xiao, Yuke Zhu, Linxi Fan, and Anima Anandkumar. 2023. Voyager: An open- ended embodied agent with large language models. arXiv preprint arXiv:2305.16291. · arXiv
- Kai Wang, Yuxuan Lin, Jian Lou, Zhen Zhou, Bobur Suvonov, and Jian Li. 2026. E-mem: Multi-agent based episodic context reconstruction for llm agent memory. arXiv preprint arXiv:2601.21714. · arXiv
- Yue Wang and Xing Chen. 2025. Mirix: Multi-agent memory system for llm-based agents. arXiv preprint arXiv:2507.07957. · arXiv
- Jason Wei, Xuezhi Wang, Dale Schuurmans, Maarten Bosma, Fei Xia, Ed Chi, Quoc V. Le, Denny Zhou, et al. 2022. Chain-of-thought prompting elicits rea- soning in large language models. In Advances in neural information processing systems, volume 35, pages 24824-24837.
- Wei Xu, Ke Mei, Han Gao, Jian Tan, Zhen Liang, and Yong Zhang. 2025. A-mem: Agentic memory for llm agents. In Advances in Neural Information Pro- cessing Systems.
- Shi Yan, Xiao Yang, Zhi Huang, En Nie, Zheng Ding, Zhe Li, Xiao Ma, Jian Bi, Kristian Kersting, Jeff Z. Pan, et al. 2026. Memory-r1: Enhancing large lan- guage model agents to manage and utilize mem- ories via reinforcement learning. arXiv preprint arXiv:2508.19828. · arXiv
- Shunyu Yao, Jian Zhao, Dian Yu, Nan Du, Izhak Shafran, Karthik Narasimhan, and Yuan Cao. 2023. React: Synergizing reasoning and acting in language models. In International Conference on Learning Representations (ICLR).
- Yufei Yin, Qianke Meng, Minghao Chen, Jiajun Ding, Zhenwei Shao, and Zhou Yu. 2025. VideoARM: Agentic reasoning over hierarchical memory for long-form video understanding. arXiv preprint arXiv:2512.12360. · arXiv
- Hongli Yu, Tinghong Chen, Jiangtao Feng, Jiangjie Chen, Weinan Dai, Qiying Yu, Ya-Qin Zhang, Wei- Ying Ma, Jingjing Liu, Mingxuan Wang, and Hao Zhou. 2025. Memagent: Reshaping long-context llm with multi-conv rl-based memory agent. arXiv preprint arXiv:2507.02259. · arXiv
- Sizhe Yuen, Francisco Gomez Medina, Ting Su, Yali Du, and Adam J. Sobey. 2026. Intrinsic mem- ory agents: Heterogeneous multi-agent llm sys- tems through structured contextual memory. arXiv preprint arXiv:2508.08997. · arXiv
- Jiarui Zhang, Muxin Fu, Guancheng Wan, Miao Yu, Kun Wang, and Shuicheng Yan. 2025. G-memory: Tracing hierarchical memory for multi-agent sys- tems. arXiv preprint arXiv:2506.07398. · arXiv
- Ningning Zhang, Xingxing Yang, Zhizhong Tan, Weip- ing Deng, and Wenyong Wang. 2026a. Himem: Hi- erarchical long-term memory for llm long-horizon agents. arXiv preprint arXiv:2601.06377. · arXiv
- Yuxiang Zhang, Jiangming Shu, Ye Ma, Xueyuan Lin, Shangxi Wu, and Jitao Sang. 2026b. Memory as ac- tion: Autonomous context curation for long-horizon agentic tasks. arXiv preprint arXiv:2510.12635. · arXiv
- Bo Zheng et al. 2024. Agent workflow memory. arXiv preprint arXiv:2409.07429. · arXiv
- Wanjun Zhong, Lianghong Guo, Qiqi Gao, He Ye, and Yanlin Wang. 2024. Memorybank: Enhancing large language models with long-term memory. In Pro- ceedings of the AAAI Conference on Artificial Intel- ligence, volume 38, pages 19724-19731.
Cited by
Sorted by citations
Sangaraju, V., & Vissa, S. (2026) · IEEE Access · doi:10.1109/access.2026.3730363 · Cited by 1
Experience Compression Spectrum: Unifying Memory, Skills, and Rules in LLM Agents
Zhang, X., Wang, G., Cui, Y., Qiu, W., Li, Z., Zhu, B., & He, P. (2026) · arXiv
“…(Zhang et al., 2026b; Yan et al., 2025; Wang et al., 2025; Li et al., 2026a), meta-learned memory architectures (Xiong et al., 2026), multi-agent coordination (Lin et al., 2026), and governance with temporal decay (Lam et al., 2026)—but converging on the same output: structured episodic records.”
Metadata
- Authors
- Lam, C., Li, J., Zhang, L., & Zhao, K.
- Affiliations
- University of Jinan (CN)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2026
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 2603.11768
- OpenAlex
- W7135244490
- Cited by
- 1
- References
- 8
- Citations by year
- 2026: 1
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Ethics and Social Impacts of AI
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Artificial Intelligence › AI-based Problem Solving and Planning
- Keywords
- long-term memory, LLM agents, memory governance, memory corruption, semantic drift, knowledge leakage, consistency checking, dynamic access control, memory consolidation, privacy
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
