Publication ledger
Defensive definitions, state models, detection methods, control patterns, and mappings to established frameworks.
A state-focused crosswalk of all ten OWASP Agentic Top 10 2026 risks against OWASP LLM Top 10 2025 risks and MITRE ATLAS v2026.06 techniques, with official identifiers, names, versions, and the boundaries that prevent false equivalence. The relationship labels are SSA editorial synthesis.
Target: MultiplePersistence: Multiple
What the security risks of context compaction are for AI agents: how compaction can preserve adversarial state while dropping valid constraints, what evidence to log, and how to prevent, contain, and recover from compromised summaries without publishing attack recipes.
Target: Context and Durable MemoryPersistence: Session to Cross-Session
The SSA working definition of an agent state attack, with boundaries around model-weight attacks, accidental behavioral state decay, ordinary invalid input, and the OS-layer self-state attacks defined in arXiv 2607.17986.
Target: MultiplePersistence: Single Turn to Shared-System