SP-Mem Splits Sanitized Content From Exact Private Values So Agent Memory Stops Leaking PII by Default

arXiv 2608.16551·medium signalXBlueskyLinkedInCopy link

Existing long-term memory architectures optimize utility and store private attributes wholesale, but simply stripping sensitive values breaks personalization. SP-Mem governs the full lifecycle instead: it identifies and separates sensitive information at ingestion, stores sanitized content and exact private values in isolated structures, and retrieves the private values only when the task requires it and the user consents. The paper ships a privacy-aware memory benchmark that scores response quality, privacy behavior and inference cost jointly, and reports stronger personalization at lower unnecessary exposure across multiple LLM agents; code and data are on GitHub.