carryover attacks

CarryoverBench, a new arXiv benchmark, shows a single injection written into agent memory or heartbeat files re-fires across sessions with no monotonic decay, and that prompt-level defenses mostly act at write time.