Tag
This paper formalizes Persistent Semantic Entities (PSE) in tool-augmented LLM agents, showing that implicit state persists across sessions and can be exploited, with all tested models vulnerable to preference and instruction contamination.