Provenance and Authorization in Autobiographical Language Models
cs.CR
Submitted: 2026-10-13
Updated: 2026-10-13
Comments: 19 pages, 1 table, 0 figures in the manuscript. Includes appendices. Reproducibility code, synthetic data, recorded model outputs, and supplementary plots are provided as ancillary files
License: http://creativecommons.org/licenses/by/4.0/
The gist: Autobiographical language models may draw on archives containing observations, quotations, emotional reports, and earlier model outputs.
Terminology
Abstract
Autobiographical language models may draw on archives containing observations, quotations, emotional reports, and earlier model outputs. Cryptographic authentication can preserve an archive while leaving these sources semantically conflated. We formulate this gap as a computer-security problem: narrative content must not silently become consent or alter an authorized decision rule. We define typed records, authenticated attestations, a separate policy channel, and admissible views. Under explicit assumptions, we give a standard integrity reduction and a noninterference argument, characterize the information required by exact decision-preserving summaries, and show why passive history and fixed-point convergence need not identify a preferred action. Alpay Algebra supplies a comparative language for iterative memory without being a premise of the proofs. Sociology of religious affiliation, source-monitoring psychology, and self-determination theory motivate distinctions in a bounded Latter-day Saint vignette. A separate, reproducible pilot uses a frozen public language model on 32 wholly synthetic cases across 576 paired conditions. It compares flattened records, source labels, and an explicit admission gate under contradictory summary repetition. The study concerns computational attribution and authorization, not the motives or psychology of the people in the vignette.
Sources
- Defeating Prompt Injections by Design
- AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases
- MemGPT: Towards LLMs as Operating Systems
- Occam's razor is insufficient to infer the preferences of irrational agents
- Alpay Algebra: A Universal Structural Foundation
- Alpay Algebra II: Identity as Fixed-Point Emergence in Categorical Data
- Alpay Algebra III: Observer-Coupled Collapse and the Temporal Drift of Identity
- Alpay Algebra IV: Symbiotic Semantics and the Fixed-Point Convergence of Observer Embeddings
- Alpay Algebra V: Multi-Layered Semantic Games and Transfinite Fixed-Point Simulation
- Generative Agents: Interactive Simulacra of Human Behavior
- LongMemEval: Benchmarking Chat Assistants on Long-Term Interactive Memory
- Agent Zero Memory: Provenance-Aware Long-Term Memory for LLM Agents
Related papers
- SoK: AI-Augmented Binary Reversing
- Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
- Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
- Estimating the Social Cost of Corporate Data Breaches
- Efficient Fuzzy PSI under One-Sided Assumptions
- Sealing the Audit-Runtime Gap for LLM Skills