Systems that remember are systems that can be compromised. As personal context management becomes infrastructure, we need to map the attack surface before adversaries do.
You can inject malicious context into someone's system by being recorded. Say something in a meeting. It enters their transcript. Gets processed into their context system. Influences their AI's future recommendations. The attack vector is a conversation.
The person who poisons your context doesn't need access to your machine. They need access to your attention.
Every meeting, every conversation, every decision generates context output. Most people capture 0% of it. Platforms capture and monetize the context you produce while you walk away with nothing. The asymmetry is the business model.
You are the richest source of structured context in every room you enter. You are also the only one not recording it.
Each person added to your context system increases your coverage of the world graph exponentially. Social capital becomes measurable. Dunbar's 150 becomes a strategic target, not a cognitive limit. The person with the most structured context about the most people has the most leverage.
Your network is only as valuable as your ability to provision it to an agent that can act on it.