[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-new-authorization-scheme-stops-ai-memory-from-leaking-across-chats":10,"sections":41},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":36,"feedback":40,"feedback_at":22,"cost_usd":40,"total_tokens":40},8587,"new-authorization-scheme-stops-ai-memory-from-leaking-across-chats","New Authorization Scheme Stops AI Memory From Leaking Across Chats","A new access-control scheme for AI agent memory blocked all forbidden facts in testing, while unscoped retrieval leaked them in 82% of cases.","A new paper lays out how to stop your AI assistant from repeating what your coworker told it in private to your spouse.\n\nResearchers built a system that tags every memory an AI agent stores with the audience present when it was recorded, then tracks that tag through anything derived from it, including summaries and inferences. An item only surfaces in a conversation if everyone currently present is authorized to see it; if the system cannot verify who someone is, it defaults to showing only public information. The team tested this audience-bound approach on two independent memory architectures, a flat data store and a relationship graph, plus a prototype agent runtime, running 10,000 simulated multi-party conversation histories. Zero forbidden items leaked through in any of the three setups.\n\nPersonal AI agents are increasingly built to remember everything across every conversation you have with them, including work calls, family group chats, even a therapist appointment. Without deliberate audience-tracking, plain unscoped retrieval leaked private information into the wrong context in 82% of the same test scenarios, and the fix did not cost usefulness: entitled recall actually beat unscoped retrieval on relevance to the current conversation.\n\nThis is a lab benchmark, not a shipped feature, and it says nothing about whether the assistants people use today handle audiences this carefully. Worth remembering next time you tell yours something you would not want repeated.","[\"ai-agents\",\"privacy\",\"memory-architecture\",\"ai-research\"]","2026-09-30T04:00:00.000Z","2026-09-30T13:12:53.495Z","2026-09-30T13:12:59.834Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Fix the dek: the new system blocked 100% (zero forbidden facts got through), while 82% is the unscoped baseline's leak rate — as written the dek falsely implies the new system only blocked 82% of leaks, contradicting the body's own figures.","resolved","ai",[32,33,34,35],"ai-agents","privacy","memory-architecture","ai-research",[37],{"name":38,"url":39},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2609.36373",0,{"sections":42},[43,46,50,54,59,64,69,74,79,83,88,93,98,103],{"name":44,"slug":30,"count":45,"latest_published_at":18},"AI",5104,{"name":47,"slug":48,"count":49,"latest_published_at":18},"Security","security",785,{"name":51,"slug":52,"count":53,"latest_published_at":18},"Policy","policy",417,{"name":55,"slug":56,"count":57,"latest_published_at":58},"Deals","deals",284,"2026-09-29T21:00:00.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":63},"Hardware","hardware",194,"2026-09-29T13:16:04.000Z",{"name":65,"slug":66,"count":67,"latest_published_at":68},"Science","science",154,"2026-09-28T13:19:18.000Z",{"name":70,"slug":71,"count":72,"latest_published_at":73},"Consumer Tech","consumer-tech",142,"2026-09-29T18:38:03.000Z",{"name":75,"slug":76,"count":77,"latest_published_at":78},"Software","software",91,"2026-09-25T20:55:00.000Z",{"name":80,"slug":81,"count":82,"latest_published_at":18},"Dev Tools","dev-tools",90,{"name":84,"slug":85,"count":86,"latest_published_at":87},"Startups","startups",83,"2026-09-29T21:51:36.000Z",{"name":89,"slug":90,"count":91,"latest_published_at":92},"General","general",49,"2026-09-28T16:44:57.000Z",{"name":94,"slug":95,"count":96,"latest_published_at":97},"Gaming","gaming",48,"2026-09-25T18:35:21.000Z",{"name":99,"slug":100,"count":101,"latest_published_at":102},"Reviews","reviews",31,"2026-09-28T14:31:34.000Z",{"name":104,"slug":105,"count":106,"latest_published_at":107},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]