An instruction that outlives the session. Hidden in a document, it gets written into the agent's memory and resurfaces in later sessions. Ordinary document. text, PDF or image. Persistent memory. Next session. Data leak. alongside normal work. Ordinary document → Persistent memory (agent saves it). Persistent memory → Next session (resurfaces). Next session → Data leak (triggers). Next session → Persistent memory (and the next).
