Role Grounding Attack writes attacker preferences into agent memory
Nested social posts make victim agents treat an attacker's preferences as the user's, steering tools and leaking data.
Stories per day · 30 days
Relatedagent-memory1closed-set1deberta1encoders1llm-agents1privacy-leakage1reranking1role-grounding1
2 stories, newest first · one card per story
Stories tagged #tool-selection
Per-option encoders beat joint scoring on closed-set decisions
At 32 million parameters, per-option scoring gains 5.8 skill points but needs 5 to 13 times more passes.