2026 · Under review, ARTMAN @ ACSAC 2026
The Price of Safety
- Measures what memory-poisoning defenses cost when no attack is present, across 4 LLM backbones and 2 blinded judges (κ ≥ 0.84).
- Write-time defenses: no measurable cost.
- Read-time reranker: −4.4 points accuracy; quarantines legitimate memories on 33.6% of items.