After memory poisoning, an AI agent needs more than a restart SC Media