Explore how indirect prompt injection can persist in AI agent memory and why secure ingestion, access controls, and tool-call authorization matter.