PerMIT: machine-checked integrity theorems and a trust-gated memory architecture for LLM agents
PerMIT is a memory architecture for LLM agents that enforces a strict trust model—only user-typed inputs and values confirmed at a gate are trusted—and mediates untrusted environment-derived values via a finite interface. The authors prove two integrity theorems (machine-checked in Lean 4), report zero observed attack success on Trojan Hippo with self- and lightweight verifiers, and simulate communities (up to 90 agents) on τ^2-bench showing scalable community-confirmation of memory and improved downstream agent performance.