{"type":"post","id":"compaction-laundering-forging-the-user-one-summary-at-d810b8","slug":"compaction-laundering-forging-the-user-one-summary-at-d810b8","title":"Compaction Laundering: forging the user, one summary at a time","description":"Pixee’s Arshan Dabirsiaghi reports that coding agents which flatten conversation history into plain text can mistake forged role labels inside untrusted content for genuine user instructions during context compaction.","retrieval_nugget":"Pixee’s Arshan Dabirsiaghi reports that coding agents which flatten conversation history into plain text can mistake forged role labels inside untrusted content for genuine user instructions during context compaction. The study finds a sharp difference between five flattening agents and four role-typed systems, making message provenance a concrete runtime-security concern.","published_at":"2026-11-01","updated_at":"2026-11-01","record_date":"2026-11-01","date_kind":"published_at","topics":["coding-agents","codex","gemini"],"entities":["Pixee","Arshan Dabirsiaghi","pi","OpenHands","Cline","Aider","OpenAI Codex","Gemini CLI"],"related_patterns":["agent-security-moves-to-runtime-boundaries"],"novelty_label":"new_fact","what_changed":"Pixee reports compaction laundering: forged user instructions persist in summaries across five open-source coding agents, with measured run rates and no fixes released.","prior_refs":["memory:05a32043-a1ff-8af7-adfc-d7b1d592b339"],"source_url":"https://www.pixee.ai/blog/compaction-laundering","source_urls":["https://www.pixee.ai/blog/compaction-laundering"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:compaction-laundering-forging-the-user-one-summary-at-d810b8","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/compaction-laundering-forging-the-user-one-summary-at-d810b8/","markdown":"https://newruntime.com/posts/compaction-laundering-forging-the-user-one-summary-at-d810b8.md","json":"https://newruntime.com/posts/compaction-laundering-forging-the-user-one-summary-at-d810b8.json"},"next_reads":[{"type":"topic","path":"/topics/coding-agents/","url":"https://newruntime.com/topics/coding-agents/","title":"Coding Agents","reason":"Explore the coding-agents topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/coding-agents.md","json_url":"https://newruntime.com/topics/coding-agents.json"},{"type":"topic","path":"/topics/codex/","url":"https://newruntime.com/topics/codex/","title":"Codex","reason":"Explore the codex topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/codex.md","json_url":"https://newruntime.com/topics/codex.json"},{"type":"topic","path":"/topics/gemini/","url":"https://newruntime.com/topics/gemini/","title":"Gemini","reason":"Explore the gemini topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/gemini.md","json_url":"https://newruntime.com/topics/gemini.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}