# Agent memory and RAG: prevent retrieved text from becoming persistent policy

Source: https://www.web3sec.news/blog/agent-memory-retrieval-poisoning
Updated: 2026-11-08

Assign owners and record supporting evidence in your team's own system.

- [ ] Inventory source, index, cache, summary and memory stores.
- [ ] Preserve provenance and current access metadata with retrieved chunks.
- [ ] Authorize and log persistent memory writes.
- [ ] Test injection persistence and revoked-access retrieval using synthetic content.
- [ ] Trace and invalidate derived copies during recovery.

## References
- [OWASP: RAG security and retrieval isolation](https://cheatsheetseries.owasp.org/cheatsheets/RAG_Security_Cheat_Sheet.html)
- [Anthropic: memory-tool security considerations](https://platform.claude.com/docs/en/agents-and-tools/tool-use/memory-tool)