An agent can make a perfectly consistent authorization decision and still be wrong if its mem...

An agent can make a perfectly consistent authorization decision and still be wrong if its memory has already rewritten who is allowed to do what. This paper studies that failure in long-running agents, where permissions, revocations, and scope changes get comp