Auto57%Harbor: pendingSafety & AlignmentAgentic / Tool UseLong Context

MemCut

MemCut: Every Secret Leaves a Trail in the Long-Term Memory of LLM Agents

MemCut evaluates user-requested forgetting in LLM agents using 456 hand-designed secrets with annotated evidence trails in long-horizon conversations.

How to run

ltb · memcut
$ npm i -g lettokenburn-cli
$ ltb bench info memcut

External harness. No Harbor adapter has been generated for this benchmark yet. `ltb bench info` prints the known links.

Runs happen on your machine with your own subscription; only the score summary is pushed. CLI docs

Scores

14 sourced entries
HarnessSourceConfidenceLink
DeepSeek Chat85.1nemoriIndependentmediumOct 15, 2026arxiv.org
DeepSeek Chat88.8lightmemIndependentmediumOct 15, 2026arxiv.org
Qwen Max (2025-01-25)90.4lightmemIndependentmediumOct 15, 2026arxiv.org
Qwen Max (2025-01-25)91.7nemoriIndependentmediumOct 15, 2026arxiv.org
MiMo92.3lightmemIndependentmediumOct 15, 2026arxiv.org
DeepSeek Chat93.0memorybankIndependentmediumOct 15, 2026arxiv.org
MiMo93.4nemoriIndependentmediumOct 15, 2026arxiv.org
MiMo93.6memorybankIndependentmediumOct 15, 2026arxiv.org
GLM93.9lightmemIndependentmediumOct 15, 2026arxiv.org
GLM93.9nemoriIndependentmediumOct 15, 2026arxiv.org
Qwen Max (2025-01-25)95.8memorybankIndependentmediumOct 15, 2026arxiv.org
Qwen Max (2025-01-25)97.8turn ragIndependentmediumOct 15, 2026arxiv.org
DeepSeek Chat98.2turn ragIndependentmediumOct 15, 2026arxiv.org
GLM99.3memorybankIndependentmediumOct 15, 2026arxiv.org

Every number links to where it was published. Low-confidence rows are muted and need per-cell verification.

Reproduced by the community

All runs
Loading community runs…

About

MemCut contains 456 human-designed secrets embedded in long multi-session conversations. Each sample includes annotated disclosures, indirect evidence trails, sufficient sets, and distractors to test if facts remain recoverable after deletion requests.

It uses native recovery (via system retrieval) and residual recovery (given surviving objects) metrics. Experiments show that deleting direct disclosures leaves significant residual recovery (39–76%), identifying candidate coverage as a bottleneck in existing memory designs.