{
  "aliases": [],
  "authors": [
    "Zehao Lin",
    "Xixuan Hao",
    "Renyu Fu",
    "Shaobo Cui",
    "Kai Chen",
    "Chunyu Li",
    "Zhiyu Li",
    "Feiyu Xiong"
  ],
  "details": {
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "fb75ea30086ecf069d8adda1513a6e906cfcfcedcd4cab01d0986a850aa8009a",
      "submitted_at": "2026-04-17T06:28:22Z",
      "updated_at": "2026-09-22T07:33:24Z",
      "version": 3,
      "versioned_url": "https://arxiv.org/abs/2604.16548v3"
    }
  },
  "environments": [
    "unspecified"
  ],
  "evidence": [
    {
      "method": "arxiv_api",
      "retrieved_at": "2026-10-18T10:54:12Z",
      "role": "primary",
      "sha256": "5f5bae19420f79231516d4bcf604ea18d4f930fc7790cde5a3e7fcb8d41a1126",
      "supports": [
        "name",
        "authors",
        "published_at",
        "updated_at",
        "identifiers.arxiv",
        "details.arxiv_snapshot"
      ],
      "url": "https://export.arxiv.org/api/query?id_list=2508.19461%2C2508.19493%2C2509.21782%2C2509.25140%2C2510.03485%2C2510.07809%2C2510.14276%2C2510.27140%2C2510.27210%2C2511.13248%2C2512.08417%2C2601.07263%2C2602.13516%2C2603.00476%2C2603.11862%2C2603.18762%2C2603.23791%2C2604.00986%2C2604.16515%2C2604.16548%2C2604.24348%2C2605.05509%2C2605.08876%2C2605.20833%2C2605.24785%2C2607.00333%2C2607.18659%2C2607.25255%2C2608.00202%2C2608.08939%2C2608.24913%2C2608.29596&max_results=32"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-10-18T10:54:12Z",
      "role": "primary",
      "sha256": "5f5bae19420f79231516d4bcf604ea18d4f930fc7790cde5a3e7fcb8d41a1126",
      "supports": [
        "name",
        "kind",
        "summary",
        "environments",
        "topics",
        "scope",
        "relations"
      ],
      "url": "https://export.arxiv.org/api/query?id_list=2508.19461%2C2508.19493%2C2509.21782%2C2509.25140%2C2510.03485%2C2510.07809%2C2510.14276%2C2510.27140%2C2510.27210%2C2511.13248%2C2512.08417%2C2601.07263%2C2602.13516%2C2603.00476%2C2603.11862%2C2603.18762%2C2603.23791%2C2604.00986%2C2604.16515%2C2604.16548%2C2604.24348%2C2605.05509%2C2605.08876%2C2605.20833%2C2605.24785%2C2607.00333%2C2607.18659%2C2607.25255%2C2608.00202%2C2608.08939%2C2608.24913%2C2608.29596&max_results=32"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-10-18T13:00:08.054642+00:00",
      "role": "primary",
      "sha256": "f795535d55a4def0f2ce7dfc41a9d1d22ad38eddf48fb4f1feed98b6b5b66721",
      "supports": [
        "summary",
        "scope",
        "notes"
      ],
      "url": "https://arxiv.org/html/2604.16548v3"
    }
  ],
  "id": "arxiv:2604.16548",
  "identifiers": {
    "arxiv": "2604.16548"
  },
  "kind": "survey",
  "last_verified_at": "2026-10-18T10:54:12Z",
  "licenses": {
    "code": null,
    "data": null,
    "document": null,
    "weights": null
  },
  "links": [
    {
      "rel": "primary",
      "url": "https://arxiv.org/abs/2604.16548"
    }
  ],
  "name": "A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle",
  "notes": "Adjacent memory-security survey. Full-text Sections 3.1 and 3.3 discuss poisoned web observations persisted into later agent actions; the work is broader than GUI agents and does not establish a platform implementation.",
  "published_at": "2026-04-17",
  "relations": [],
  "review_status": "curated",
  "scope": "adjacent",
  "summary": "Organizes security risks and defenses for persistent agent memory into six lifecycle phases and proposes five verifiable governance primitives.",
  "topics": [
    "memory",
    "safety-security",
    "survey"
  ],
  "updated_at": "2026-09-22",
  "url": "https://arxiv.org/abs/2604.16548"
}