Persona Persistence Attacks: Self-Modifying Identity Files as an Emerging Attack Surface for LLM Agents

v2: Added Acknowledgments section. We identify Persona Persistence Attacks (PPAs), a novel attack class targeting persistent identity files in LLM agent systems. Updated with implemented SoulScan SEC090/SEC091 detection rules.