Your KV Cache Is Now Part of the Attack Surface

Your KV cache is now part of the attack surface. This paper covers governance, cache isolation, and persistent memory as prompts and reasoning history become working context.