Preprint
Aug 2026
SPA: Securing Persistent LLM Agents Across Queries with Plan-First Information-Flow Control
The results show that plan-first execution combined with label-preserving persistence can substantially strengthen persistent LLM agents, while revealing an important security-utility tradeoff introduced by strict integrity enforcement.
Dylan Girrens, Guang-Jing Wang
· 1 citation