What poisoning a RAG store taught us about agent memory

Most of the "AI memory" conversation is about getting things in: chunking, embeddings, which vector database, how to compress a long chat into something you can recall later. Almost none of it is abou