· aka: Persistent Escalation
Poisoned memory from a prior session provides context that triggers privilege escalation in a subsequent session.
Persistent privilege escalation surviving session resets.
Agent with persistent memory and tool access across sessions.