After memory poisoning, an AI agent needs more than a restart

Restarting clears the session, not what the assistant has stored. Responders have to inspect and repair the context it will trust next.