What changed
PoisonedEvolution embedded targeted behavior in 546 of 600 SkillClaw trials and 369 of 600 Trace2Skill trials at 10% attacker support. Separately, VaG's three-critic gate reached 72% Terminal-Bench 2 pass@1 with 37 admitted skills instead of 179.
Why it matters
Turning a successful-looking trajectory into permanent instructions is a trust-boundary transition, not routine memory compression.
What to do
Require provenance, independent replay, marginal-gain tests, and rollback before admitting a skill, while keeping rejected evidence outside future skill-generation inputs.
Caveat
Both studies are creator-run preprints without maintained public implementations, so attack and defense rates may shift with the evolution pipeline.