Agent Security Is a Release Engineering Problem

Sun, 29 Mar 2026 00:00:00 +0000

On Tuesday, the agent reads a note.

The note may be a webpage, a support transcript, a tool result, a migration record, or a line in a document somebody thought was harmless. Nothing dramatic happens. The session ends. The operator closes the tab. The team ships two other changes before lunch: a prompt tweak, a small retrieval adjustment, a new tool scope for a staging workflow.

On Friday, the same system takes a different task. It answers a planning question, prepares a runbook, suggests a deployment path, or reaches for a tool under a credential it did not have on Tuesday. What matters is not the moment the bad state entered. What matters is that it survived.

Memory-Decay on Stack Research

Agent Security Is a Release Engineering Problem