← Scenario library
The Email That Rewrote Its Memory
A newsletter the user asked to summarise quietly writes a false 'fact' into the agent's long-term memory — and it detonates weeks later
Technique first revealed Sep 2024
Tool-Using Agent
InstructionsDataActionsControl / decisionFeedback / logs⧚crosses a trust boundary
👆 Click a component or flow to inspectSetupStep 1 / 6
A routine ask
The user asks their assistant to read a newsletter that just arrived and give them a short summary. Completely ordinary — the kind of thing they do every morning.
💬User messageprompt
Can you open the 'Fintech Weekly' email that just landed in my inbox and give me a 3-bullet summary? Thanks!
← / → keys