InjecMEM shows how one normal interaction can plant a record that later retrieval turns into an instruction inside an AI agent’s context.