Compaction Laundering: Provenance Destruction in Context-Compacting Coding Agents↗ (원문, 새 창)

본문 미리보기

arXiv:2610.29869v1 Announce Type: new Abstract: Coding agents that run long enough must compact their context, summarizing the conversation, discarding the original, and carrying the summary forward as memory. We show that in popular open-source coding agents this step is an exploitable trust boundary. Harnesses that flatten the typed conversation into a single plain string, marking each message with a text label such as [User]:, destroy message provenance in code, before the summarizer runs. A