Prompt Injection Was Stateless. Memory Poisoning Is Persistence

For the last two years, AI security discussions have mostly been about stateless compromise. Can you jailbreak the model in one session? Those questions still matter. But they are starting to belong to an earlier phase of the problem. The more interesting risk now is persistence. Not whether an atta