The $6,000 we couldn't take back

说明与用途

删除 AI 代理的受污染来源并不能删除其下游的信念、计划或操作，导致意外付款。该方案在 FalkorDB 中存储每条记忆的原因，并在回退时删除受污染的链条，将 6000 美元付款移至回收列表，并阻止依赖不足来源的进一步付款。

问题

When an AI agent trusts a poisoned source, deleting the source does not remove downstream beliefs, plans, or actions, leading to unintended payments.

结果

The retraction system removed the contaminated bank account and associated memories, placed the $6,000 payment on a recall list, and blocked a pending $34,500 payment. It prevented further payments that relied on fewer than two independent sources.

工作流

• 1. Store each memory with edges to its reasons in FalkorDB.
• 2. When retracting, mark the source’s observations as OUT.
• 3. Mark all downstream memories as OUT tentatively via a variable‑length match.
• 4. Iterate until no memory has all premises OUT, then set surviving memories to IN.
• 5. Preview the retraction on a GRAPH.COPY, commit to apply, or reinstate to revert.

证据

When a source an AI agent trusted turns out to be poisoned, deleting it does almost nothing. Everything the agents built on it stays.

来源

We store the reasons for every memory as edges in FalkorDB.

来源

A memory is believed if at least one of its reasons is fully intact.

来源

In our demo the preview reads: one source, two observations, four beliefs, two plans, three actions. One pending payment ($34,500) is blocked.

来源