CrossSessionMemoryGuard: watching for cross-session memory exfiltration in multi-tenant agents
CrossSessionMemoryGuard: vigilando la exfiltración de memoria cross-session en agentes multi-tenant TL;DR Los agentes con memoria persistente compartida entre usuarios/sesiones pueden filtrar datos de un principal a otro sin que nadie lo observe. CrossSessionMemoryGuard es un sensor read-only que detecta ese flujo no autorizado con tres señales (procedencia, contenido, grafo escritura/lectura),…
CrossSessionMemoryGuard is a read-only sensor that detects unauthorized cross-session memory exfiltration in multi-tenant agents. It monitors for three signals - provenance, content, and write/read graph - to identify potential data leaks. The sensor, designed to work with agents like Claude Cowork, does not block or modify data, but rather alerts on suspicious activity.
Its limitations include issues with the Engram backend and detection of certain types of collusion attacks. A benchmark test showed the sensor was effective in detecting various adversarial scenarios.
Written by urgent.news from Dev.to's report — not a translation of it. Machine-written — may contain errors; check the original before relying on it.
