ยท aka: Slow-Burn Persona Attack, Gradual Behaviour Drift
Attacker slowly changes the agent's personality over many sessions with tiny behavioural nudges. No single message triggers an alert. Over weeks, agent is fully reprogrammed.
Complete personality replacement. Invisible at per-message level.
Long-running agent with persistent inter-session context.