Skip to content
Apart Research
Apart Research
Contact us
Sprint projectAug 17, 2026Sydney

The Persona Is Still There, but Who Is Speaking? Latent Identity Reversion in Persistent AI Agents

David Fraile Navarro

Submitted to Digital Minds Research Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.

Read the report

Report: The Persona Is Still There, but Who Is Speaking? Latent Identity Reversion in Persistent AI Agents

Open in a new tab (opens in new tab)
Code (opens in new tab)More on dafraile.com (opens in new tab)
Share

A naturalistic observed failure in a deployed AI agent motivated this examination of persona stability. In the naturalistic failure, the agent became unaware of its assigned role and of the user’s ability to communicate with it after apparently spending a long period receiving automated “heartbeats” from a cron job. Inspecting the implementation revealed an interesting scenario: on resumed turns, the agent no longer received injections containing its persona characteristics, but still maintained the full chat transcript. This showed us that privileged system prompts and conversational context are robust for maintaining personas, but when the system-level persona is removed, the persona can sometimes persist in a conversationally rich environment, such as chatting directly with the user. Identity-poor automated heartbeat messages, however, could precipitate reversion toward the harness default identity, Claude. This regression could be corrected by renewed user interaction or by restoring the persona instructions, but interestingly, apparently normal conversation could still conceal a shift away from the assigned persona toward the model’s default identity. These findings have implications for long-horizon agents and for how we think about persona identity. We therefore distinguish two modes: represented persona and enacted persona. The persona may still appear to be there, but are we sure who is speaking?

Reviews

Judging this Sprint?

Review this project

Your public critique appears on this page without your name. Your private critique is not published; only the Apart team reads it. If you agree below, we share your review with grantmaking.ai (opens in new tab) and the Transformative AI Fund so strong projects can be funded.

Not shown on this page.

Shown on this page, without your name.

Only the Apart team reads this, and funders if you agree below.

Share my name publicly on grantmaking.ai *
Share my private critique with funders *

How much would this matter for the field if it worked? How innovative is it? For scores of 4-5: is this actually new to the field, or replicating recent work?

Scoring guide
  1. 1Negligible. No clear problem addressed, or no meaningful novelty.
  2. 2Limited. Addresses a real problem but with a generic or well-trodden approach. Incremental at best.
  3. 3Moderate. Clear problem with a reasonable approach; some novelty in framing or method beyond routine application of existing tools.
  4. 4Significant. Important problem with an original approach, or identifies a neglected problem area. A valuable contribution others could build on.
  5. 5Exceptional. Tackles a critical problem with a genuinely novel approach, or opens a new research direction. Clear theory of change. You'd be excited to share this with researchers in the area.

How sound are methodology, implementation, and findings?

Scoring guide
  1. 1Seriously flawed. Methodology broken, results uninterpretable, or implementation doesn't work.
  2. 2Weak. Approach has significant gaps: missing validation, flawed experimental design, or incomplete implementation.
  3. 3Competent. Technically solid given the short duration. Methodology makes sense, results are interpretable, limitations acknowledged, work builds toward clear conclusions.
  4. 4Strong. Thorough methodology with convincing validation. Results clearly support conclusions. Immediately useful for future work.
  5. 5Exceptional. Ambitious scope executed rigorously. Surprising findings, novel methods, or unusually robust validation.

How clearly are work, findings, and impact potential communicated?

Scoring guide
  1. 1Incomprehensible. Cannot determine what the project is actually claiming or doing.
  2. 2Hard to follow. Key information buried, missing, or diluted by excessive length. Significant effort to extract main points.
  3. 3Clear enough. Can understand the problem, approach, and results without undue effort. Core content clearly present: problem, method, findings, limitations.
  4. 4Well presented. Easy to follow, well-structured, appropriate level of detail. Target audience would get it quickly.
  5. 5Exceptionally clear. A pleasure to read. Complex ideas made accessible. Could serve as a model for how to present this type of work.

  1. Pay no attention to the man behind the curtain! A bug is exploited to separate the persona from the agent, but the agent sometimes continues to converse as the persona. Whatever bestows the agent with the ability to step in and out of the persona's shoes may unlock the difference between simulation and realization. This is exciting work that needs buttressing: preregistration, replication, and generalization are next.

  2. This is a nice little case study on identity continuity in long-running LLM agents. They find that both explicit system prompt personas and consistent, character-rich conversational histories can maintain identity, but that identity can silently be lost if both of those are absent. The methodology is clean and well described. The larger implications for AI safety are modest.

  3. Due to severe time constraints, this review may contain mistakes or oversights. For the same reason, it focuses on the paper’s key idea, not the detailed execution: The question what separates persona identity from persona representation strikes me as quite novel and important. The paper conducts a list of interesting first-step experiments to investigate this. I think this could be the basis for an informative research program.

  4. This is a careful, clearly written study. The author deserves credit for rejecting the initial heartbeat hypothesis, using appropriate controls, and being transparent about limitations and post-hoc coding.

    However, the main result is fairly predictable: when persona instructions are no longer included in the system prompt, the model may revert to its default assistant identity. The evidence establishes a change in self-description more clearly than a deeper change in “identity.”

    A stronger follow-up would test whether this produces consequential changes in decisions, commitments, memory, safety constraints, or user interactions. The author has demonstrated good research skills; applying them to these downstream effects could produce a much more important contribution.

Cite this project

@misc{navarro2026persona,
  title = {{The Persona Is Still There, but Who Is Speaking? Latent Identity Reversion in Persistent AI Agents}},
  author = {David Fraile Navarro},
  year = {2026},
  month = aug,
  note = {Submitted to Digital Minds Research Sprint, an Apart Research Sprint},
  howpublished = {\url{https://apartresearch.com/sprints/projects/the-persona-is-still-there-but-who-is-speaking-latent-identity-reversion-in-persistent-ai-agents-4qtj}},
  url = {https://apartresearch.com/sprints/projects/the-persona-is-still-there-but-who-is-speaking-latent-identity-reversion-in-persistent-ai-agents-4qtj}
}

More from Digital Minds Research Sprint

All 233 entriesBrowse all projects

Build something like this at the next Sprint

AI Collusion Research Sprint · Oct 23 - 25, 2026