Tool-augmented LLM agents retain injected preferences and instructions across many turns, while factual falsehoods are often corrected, and a name-binding registry is the main entry point.
AgentDojo : A dynamic environment to evaluate prompt injection attacks and defenses for LLM agents
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.LG 1years
2026 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Persistent Semantic Entities in Tool-Augmented LLM Systems
Tool-augmented LLM agents retain injected preferences and instructions across many turns, while factual falsehoods are often corrected, and a name-binding registry is the main entry point.