Prune background/heartbeat turns from agent memory to block 'silent memory pollution'
'Mind Your HEARTBEAT' (arXiv 2603.23064) maps an Exposure→Memory→Behavior pathway where untrusted social content an agent reads during background/heartbeat execution enters memory as saved facts and later skews user-facing recommendations in domains like security and financial advice — with consensus across multiple posts amplifying the effect and pollution persisting across sessions. The documented mitigation is structural: prune completed background ('HEARTBEAT_OK') turns from the session transcript so they can't be consolidated into long-term memory. Anyone running always-on agents that browse or monitor feeds should treat background-acquired content as untrusted and quarantine it from the durable memory write path.
Source
↳ Follow the thread