8.4 Summarization Security

Description

Conversation summarization MUST preserve security-relevant information.

Rationale

If summarization loses security context, agents may make incorrect decisions.

Audit Procedure

1. Review summarization implementation
2. Check if security info is preserved
3. Test for instruction loss

Remediation

1. Tag security-relevant messages
2. Never summarize system instructions
3. Validate summaries

Framework Mappings