What we tested, what we found and what we changed.
We ran a published attack's test cases on Kijito.
When a decision changes, an agent with memory has two jobs: learn the new answer, and stop using the old one. The second job is the one that fails quietly.