@misc{indiciaebde33839f1c9,
  title = {SPA: Securing Persistent LLM Agents Across Queries with Plan-First Information-Flow Control},
  author = {Dylan Girrens and Guangjing Wang},
  year = {2026},
  url = {https://arxiv.org/abs/2608.27234},
  note = {Source identifier: 2608.27234}
}