AgentMemGate: Addressing Speculation Contamination in Conversational Assistant Memory
cs.AI
Submitted: 2026-10-06
Updated: 2026-10-06
Comments: Accepted at the PALM Workshop at NeurIPS 2026. 15 pages, 4 figures
Code: https://github.com/DistylAI/agentmemgate-artifacts
License: http://creativecommons.org/licenses/by/4.0/
The gist: Conversational AI assistants with long-term memory extract facts from user messages into a store consulted in later conversations.
Abstract
Conversational AI assistants with long-term memory extract facts from user messages into a store consulted in later conversations. A stated plan can enter that store as fact: a user who might move to Seattle may be recorded as already living there. We call this speculation contamination. Final-state memory benchmarks miss this error because they do not probe intermediate state and include few unresolved speculations. We present AgentMemGate, a write-time gate for profile-store memory that classifies extracted statements as speculation, completed event, correction, or other. Speculations remain outside memory, with conditions governing later promotion or deletion. We also contribute a dataset of multi-session conversations in which plans are confirmed, abandoned, or left unresolved. On our 147-conversation held-out set, Mem0 and Graphiti assert unresolved plans as current state for 35.2% and 27.3% of pending plans. On the core benchmark, AgentMemGate eliminates all observed contamination relative to the identical ungated pipeline (87.5% to zero for the most exposed extraction style) and raises task accuracy from 65% to 95%. On the harder held-out set, gated contamination is 3.4% to 5.7% and task accuracy rises by 9 to 13 percentage points. Our analysis identifies field matching as the main remaining bottleneck: realistic speculations often match no profile field and never reach the gate. We release our datasets, prompts, and evaluation code.
Sources
- Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents
- Keep Me Updated! Memory Management in Long-term Conversations
- STALE: Can LLM Agents Know When Their Memories Are No Longer Valid?
- HaluMem: Evaluating Hallucinations in Memory Systems of Agents
- ES-MemEval: Benchmarking Conversational Agents on Personalized Long-Term Emotional Support
- Cordon: Semantic Transactions for Tool-Using LLM Agents
- Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory
- From Untrusted Input to Trusted Memory: A Systematic Study of Memory Poisoning Attacks in LLM Agents
- Evaluating Long-Horizon Memory for Multi-Party Collaborative Dialogues
- MemRouter: Memory-as-Embedding Routing for Long-Term Conversational Agents
- Know Me, Respond to Me: Benchmarking LLMs for Dynamic User Profiling and Personalized Responses at Scale
- REALTALK: A 21-Day Real-World Dataset for Long-Term Conversation
- TiMem: Temporal-Hierarchical Memory Consolidation for Long-Horizon Conversational Agents
- HorizonBench: Long-Horizon Personalization with Evolving Preferences
- Evaluating Very Long-Term Conversational Memory of LLM Agents
- MemGPT: Towards LLMs as Operating Systems
- Supersede: Diagnosing and Training the Memory-Update Gap in LLM Agents
- Zep: A Temporal Knowledge Graph Architecture for Agent Memory
- Chronos: Temporal-Aware Conversational Agents with Structured Event Retrieval for Long-Term Memory
- In Prospect and Retrospect: Reflective Memory Management for Long-term Personalized Dialogue Agents
Related papers
- MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
- Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
- Agents' Last Exam
- The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
- MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
- Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems