A paper posted to arXiv on October 5, 2026 says AI agents sharing a memory can pass data one team may not see inside saved results. In the authors’ simulations, a content-only baseline showed a leak rate of 18.8% to 25.5%. Their zero-leak result is a proof that assumes complete column records.