Zewen Liu
6 min
This paper investigates whether evaluator bias—systematic preferences in reward models or human feedback—can persist and propagate across time in autonomous LLM agents through their memory systems. The author introduces the concept of "Memory Contagion," defined as the cross-temporal propagation of bias from past experiences to future agent behavior via stored memory.
The study formalizes Memory Contagion using a metric called Gamma_temporal, which measures the behavioral distance between agents retrieving from biased versus clean memory stores. The author conducts a four-phase experimental pipeline using two types of bias (length preference and authority bias) and compares two consolidation strategies: oracle consolidation (perfect, lossless merging) and LLM-based consolidation (summarization). The research further decomposes the contagion into content-based and retrieval-based components and performs a dose-response analysis to determine if there is a safe threshold for memory contamination.
The study reveals that Memory Contagion is a significant vulnerability in current agent designs. Key findings include:
As autonomous agents are increasingly deployed in high-stakes environments, their reliance on long-term memory makes them susceptible to "historical" biases. This work demonstrates that simply improving memory consolidation is insufficient to prevent bias propagation if the input experiences are already tainted. It provides a formal framework for developers to measure and potentially mitigate cross-temporal bias in agentic systems.
Large Language Model (LLM) agents increasingly rely on memory systems to maintain long-term coherence. Recent work shows that agent memories degrade during continuous consolidation. However, existing research assumes memories are derived from unbiased experiences. In this work, we identify and formalize a novel phenomenon: Memory Contagion -- the cross-temporal propagation of evaluator bias through agent memory. We show that when agents are trained or guided by biased evaluators, their experiences become biased; when these trajectories are stored and consolidated into memory, the bias propagates to future agents retrieving from the same memory store, even when consolidation is perfect (oracle). Across two bias types (length preference, authority bias) and four experimental phases, we demonstrate: (1) Memory Contagion occurs for length bias even with perfect consolidation on older models (Gamma_A = 13.18, DeepSeek V4-Chat), while newer models (V4-Pro, Claude) are immune, proving both that biased input is a sufficient cause and that contagion is model-generation-dependent; (2) authority bias fails to propagate in all 15 controlled multi-seed experiments (Gamma_A = 0.00), revealing that not all evaluator biases can cross temporal boundaries through current memory architectures; (3) No observed safe threshold: length bias propagation is detected at contamination rates as low as p=0.2. Our findings expose a critical but contingent vulnerability in current agent memory designs and provide formal tools for measuring cross-temporal bias propagation.
Sam: Did they find the bias was coming from the memories themselves, or from the way the system searches for them?
Alex: That's one of the sharper questions in the paper, and they tested it carefully. To isolate the content from the search process, they forced the AI to pick memories at random, bypassing its usual retrieval method entirely. If the bias disappeared, that would mean the search process was the culprit. But it didn't disappear.
Sam: So the bias was in the content itself.
Alex: Yes, though they found both factors contribute — the stored information and the retrieval method each play a role. The content matters slightly more, but neither is innocent. Importantly, the two effects seem to operate independently. It's like two separate leaks in a pipe rather than one combined failure.
Sam: That's actually useful to know. It means fixing one part of the system could make a real difference, even if the other part still has issues.
Alex: That's the practical implication. And they did test a fix. They had an AI go through the stored memories and rewrite them — removing the bias markers while keeping the factual content intact. A kind of editorial pass on the memory bank.
Sam: Did it work?
Alex: For one type of bias, it worked quite well — reducing the contamination by around ninety percent. But that result wasn't universal, which brings us to something the paper found that's worth paying attention to: not all biases spread equally.
Sam: What do you mean?
Alex: They tested two different kinds of bias. The first was a tendency to write very long answers — what they call "length bias." The second was a tendency to favour responses that cite authoritative sources, even when that deference wasn't warranted. The length bias spread readily and proved stubborn to remove. The authority bias, on the other hand, failed to propagate at all in their experiments.
Sam: So some bad habits are more contagious than others?
Alex: That's what the evidence suggests. It implies that the way an AI is built might make it naturally resistant to certain patterns, even if it's vulnerable to others. The researchers don't fully explain why the authority bias didn't spread — it's one of the open questions — but the finding does suggest that the architecture of these systems matters, not just the data.
Sam: You mentioned earlier that some newer, more capable models seemed immune to this. Is that related?
Alex: Possibly. The researchers suspect that more capable models are better at following the specific instructions they're given in the moment, rather than defaulting to patterns from past examples. They're less likely to be pulled along by what previous agents did, and more likely to focus on the current task.
Sam: So as the models get smarter, they become more independent — less swayed by their own history?
Alex: That's a reasonable way to put it. Though the researchers are careful not to treat this as a guaranteed solution. A more capable model might handle memory contagion better, but that doesn't mean the problem disappears. It means the risk profile changes.
Sam: Is there a safe level of contamination? Like, if only a small fraction of the memories are biased, can the system just absorb that without it affecting its behaviour?
Alex: The paper found no safe threshold. Even when only a small proportion of the stored memories contained bias, the system's behaviour shifted measurably. And the relationship isn't a simple straight line — sometimes adding more bias didn't produce proportionally more extreme behaviour, which suggests the system may be partially self-correcting in some conditions. But the researchers are clear: you cannot rely on that self-correction. The sensitivity is real, and it kicks in at low levels.
Sam: It's a bit like a water supply. Even a small amount of contamination can affect the whole system, and you can't assume the pipes will filter it out on their own.
Alex: That's a fair analogy. The researchers' conclusion is that memory system designers need to treat input quality as a primary concern — not an afterthought. Organising the memory efficiently is not enough if the content going in is flawed.
Sam: So the takeaway is: clean data matters more than clean filing.
Alex: And smarter models help, but don't eliminate the responsibility to get the data right in the first place. Memory contagion is a real and measurable phenomenon, it varies by bias type and model capability, and it can be reduced — but it requires deliberate effort at the design stage.
Sam: It's a bit like being a careful scientist. You have to be sceptical of your sources, not just confident in your methods.
Alex: Well put. The system is only as reliable as the experiences it learns from. Thanks for listening to ResearchPod.