Agent memory poisoning moves past stored content: which experiences are kept, and in what order they merge, can flip decisions
MemForm splits how an LLM agent's long-term memory is formed into five intervenable interfaces, and across six models and two response formats all five showed behavior being rewritten.