Paper deep dive
Creating an Atomic User Model for Personality-Aware Large Language Model Interaction
B. Sankar, Deepthika S, Pawni Yadav, Amogh A S
Intelligence
Status: succeeded | Model: Gemma-4-26B-A4B | Prompt: intel-v1 | Confidence: 91%
Last extracted: 9/17/2026, 3:24:09 AM
Summary
This paper introduces the Atomic User Model (AUM), a structured, human-readable profile designed to capture stable personality traits rather than transient preferences, addressing the limitations of current LLM personalization methods. The authors propose a retrieval-based pipeline where AUM serves as an index, allowing for the selection of relevant personality fields based on the task context. Experiments with simulated users demonstrate that retrieving a small subset of AUM fields (23% of context) achieves style fidelity comparable to using the full profile and significantly outperforms flat preference notes in mimicking user voice.
Entities (7)
Relation Signals (9)
B. Sankar ā affiliatedwith ā Indian Institute of Science
confidence 95% Ā· Affiliation: Department of Mechanical Engineering, Indian Institute of Science (IISc)
Atomic User Model ā usedin ā Retrieval-Augmented Generation
confidence 92% Ā· we use AUM as a searchable index... a budgeted retriever pass along only a few relevant fields.
Atomic User Model ā hascomponent ā Psychological Layer
confidence 90% Ā· AUM covers psychological, cognitive, experiential, behavioral, and social details.
Atomic User Model ā hascomponent ā Behavioral Layer
confidence 90% Ā· AUM covers psychological, cognitive, experiential, behavioral, and social details.
Atomic User Model ā hascomponent ā Social Layer
confidence 90% Ā· AUM covers psychological, cognitive, experiential, behavioral, and social details.
Atomic User Model ā hascomponent ā Cognitive Layer
confidence 90% Ā· AUM covers psychological, cognitive, experiential, behavioral, and social details.
Atomic User Model ā hascomponent ā Identity Core
confidence 90% Ā· AUM is described as a readable profile with a stable identity core surrounded by four layers.
Atomic User Model ā proposessolutionto ā Personality Seepage
confidence 88% Ā· The paper argues that storing only preferences fails due to personality seepage, and proposes AUM to capture stable personality traits.
Artificial Fish Swarm Algorithm ā usedfor ā Retrieval Optimization
confidence 80% Ā· the swarm retriever against forward greedy... artificial fish swarm algorithm models a population of agents
Cypher Suggestions (0)
No Cypher suggestions yet.
Abstract
Abstract:Assistants built on large language models are expected to write in their users' own voice. Most systems summarise the user's preferences and include the summary in the prompt. This is the wrong way round. Preferences are only the surface of a person and change with the task, while the underlying personality stays the same, so storing preferences alone means relearning the user afresh whenever the task changes. This paper makes four contributions. First, we describe an effect we call personality seepage: the wording of a prompt carries traces of the writer's personality, which the assistant copies without knowing the writer. Second, we propose the Atomic User Model (AUM), a readable profile with a stable identity core surrounded by four layers covering psychological, cognitive, experiential, behavioral, and social details, plus notes on inner conflict and authenticity. Third, instead of inserting the entire profile, we use AUM as a searchable index, in which a task classifier, a selection step, and a budgeted retriever pass along only a few relevant fields. Fourth, we test the pipeline with 16 simulated users, 6 style-sensitive tasks, and 3 seeds. Eight retrieved fields matched the writing quality of the whole profile, while using only 23 percent of the context (211 tokens instead of 915). They scored 0.24 points higher than a plain preference note on a five-point scale. Accuracy in picking a user's own writing from four samples rose from 14.9 to 42.7 percent, where guessing gives 25 percent. Four pre-registered controls showed no effect, so the gain comes from the profile's structure rather than the search method. Personalization helps most for the users for whom a generic assistant imitates them the worst.
Tags
Links
- Source: https://arxiv.org/abs/2609.12086v2
- Canonical: https://arxiv.org/abs/2609.12086v2
Trouble viewing inline? Open PDF directly ā
Full Text
166,899 characters extracted from source content.
Expand or collapse full text
Creating an Atomic User Model for Personality-Aware Large Language Model Interaction B. Sankar 0000-0001-5844-6273 Email: sankarb@iisc.ac.in Corresponding author: Corresponding author: B. Sankar Corresponding author: Corresponding author email: sankarb@iisc.ac.in Affiliation: Department of Mechanical Engineering, Indian Institute of Science (IISc), Bengaluru, 560012, Karnataka, India Deepthika S 0009-0009-4386-6510 Email: deepthikas123@gmail.com Affiliation: Department of Design and Manufacturing, Indian Institute of Science (IISc), Bengaluru, 560012, Karnataka, India Pawni Yadav Email: pawniyadav3435@gmail.com Affiliation: Department of Design and Manufacturing, Indian Institute of Science (IISc), Bengaluru, 560012, Karnataka, India Amogh A S Email: amogh.setty07@gmail.com Affiliation: Department of Design and Manufacturing, Indian Institute of Science (IISc), Bengaluru, 560012, Karnataka, India Affiliation: Corresponding Author: B. Sankar Corresponding Author Email: sankarb@iisc.ac.in Abstract Assistants built on large language models are increasingly expected to write as their user would write, and the dominant approach to that expectation operates on a single channel: past preferences are summarised out of conversation history and reinserted into the context window. We argue that this inverts the natural order of inference. Preferences are the task-dependent surface of an underlying personality structure that is comparatively stable, so a system that stores only preferences must relearn the person whenever the task changes. This paper makes four contributions. First, we characterise a phenomenon we call personality seepage, in which the linguistic surface of a prompt carries a personality fingerprint that the assistant mirrors without any access to the personality that produced it. Second, we propose the Atomic User Model (AUM), a structured, human-readable representation that organises a person as a stable identity nucleus surrounded by four interpretable shells covering psychological, cognitive and experiential, behavioural, and social content, together with cross-shell entries recording internal conflict and authenticity. Third, we treat AUM as a retrieval index over a person rather than a prompt prefix, and specify a personality-aware pipeline in which a task classifier, a component-selection function and a budgeted retriever return a small payload of fields at generation time. Fourth, we evaluate the pipeline in a simulation study with sixteen language-model-simulated participants, six style-sensitive tasks and three seeds, and in a synthetic scaling study of the retriever itself. Retrieving eight fields matched the style fidelity of injecting the entire user model while using 23% of the context (211 tokens against 915), improved on flat preference notes by 0.24 points on a five-point scale (p<0.001p<0.001, dz=0.50d_z=0.50), and raised forced-choice identification of the participantās own voice from 14.9% to 42.7% against 25% chance. Four pre-registered controls returned null, including the swarm retriever against forward greedy, which locates the effect in the structured representation rather than in the search over it. A supplementary analysis shows the benefit is largest for participants whose voice the un-personalised assistant reproduces worst (Ļ=ā0.61Ļ=-0.61, p=0.013p=0.013), which is a design result rather than a statistical one: personalisation is worth most to the people the default serves least. We discuss what a budgeted payload buys for privacy-by-architecture, and what a simulation can and cannot establish about whether real people recognise themselves. Keywords: user modelling , personalisation , personality , large language models , retrieval augmented generation , context budget , scrutability , privacy by architecture , simulation study , artificial fish swarm algorithm 1 Introduction Adaptive systems have modelled their users for as long as they have adapted to them. The generic user modelling tradition in human-computer interaction established that a user model is a reusable component with an explicit schema, maintained separately from the application that consumes it (Kobsa, 2001; Brusilovsky and MillĆ”n, 2007), and personalised search built profiles from observed behaviour: interests and activities harvested from a desktop index (Teevan et al., 2005), click and query histories evaluated at scale (Dou et al., 2007), and short-term session signals combined with long-term interest (Bennett et al., 2012). Assistants built on large language models (LLMs) have inherited this design in a compressed form. Deployed memory features distil past conversations into short preference notes and reinsert them into later contexts, and the research literature has followed with memory architectures (Packer et al., 2023; Zhou et al., 2024; Liao et al., 2026), per-user parameter-efficient adaptation (Tan et al., 2024), and surveys that map the resulting space (Tan and Jiang, 2023; Zhang et al., 2025). What these approaches share is not an algorithm but a unit of storage. They store what a user has done, or has said they want. They do not store the person from whom those wants emerge. The difference is easiest to see when a stored preference goes stale. A user plans a six-day conference trip to Paris and discusses cost of living and itineraries with an assistant. Two weeks later the user privately decides not to travel, and does not say so. A month after that, while drafting a project timeline, the assistant blocks out the original travel week as an absence. The system is not wrong about its source: it remembers the preference faithfully, and the retrieved item was exactly the right item. It is wrong about the person. It holds no representation of the user as a decision maker whose plans get revised, so it has no basis on which to flag a stale assumption. Retrieval quality is not the failure here, and better retrieval over the same unit would not have prevented it. This paper argues that the missing layer is a different unit of storage. The argument rests on a claim borrowed from personality psychology rather than from information retrieval. Personality traits show substantial rank-order stability across the lifespan, with test-retest correlations rising from roughly 0.3 in childhood to 0.7 in later adulthood (Roberts and DelVecchio, 2000), and mean-level change, while real, is gradual and patterned (Roberts et al., 2006; Specht et al., 2011). Preferences, by contrast, are situational: they are what personality produces when it meets a particular decision context. If the stable layer is the one that generalises across tasks, then a system that stores only the unstable layer is storing the wrong thing. We make four contributions. 1. Personality seepage. We characterise a phenomenon in which a userās linguistic and behavioural patterns enter the assistant through the surface of their prompt, and the assistant mirrors that surface while having no access to the personality that produced it (Section 3). Seepage is why generic assistants can appear briefly personalised and then fail on exactly the parts of a task the user did not spell out. 2. The Atomic User Model. We propose a structured, human-readable representation that organises a person as a stable identity Nucleus surrounded by four shells covering psychological, cognitive and experiential, behavioural, and social content, plus cross-shell entries recording internal conflict, growth trajectory and an authenticity index (Section 4). The metaphor is not decorative: it encodes two design commitments, differential stability and differential observability, that a flat schema cannot express. 3. Personality-aware retrieval. We treat aum as an index over a person rather than a prompt prefix, and specify a pipeline in which a task classifier, a component-selection function Ļā”(t)Ļ(t) and a budgeted retriever return a payload of k fields at generation time (Section 5). The retrieval objective carries an explicit redundancy penalty, which is what makes payload selection a combinatorial problem rather than a sort. 4. Two studies. We evaluate the pipeline with sixteen LLM-simulated participants across six style-sensitive tasks and three seeds (Sections 6 and 7), and we study the retrieval problem on its own in a synthetic sweep over instrument size, budget and redundancy weight (Section 8). The headline empirical result is a context result. Eight retrieved fields matched the style fidelity of injecting the entire 32-field user model while using 23% of the injected context, and improved on flat preference notes by 0.24 points on a five-point scale. Forced-choice identification of the participantās own voice rose from 14.9% under preference notes, which is not distinguishable from chance, to 42.7% against a 25% baseline. Four controls returned null, and we report them in full because together they bound the claim. Selecting the right k fields was not distinguishable from selecting k at random from the same admissible pool; component selection contributed nothing beyond retrieval; the swarm retriever neither beat forward greedy on generated style nor reached a higher value of its own objective; and the redundancy term did not earn its place against a relevance-only top-k. The scaling study of Section 8 explains why, and the explanation is specific: at the operating point the simulation used, forward greedy is already within 0.1% of the exhaustive optimum, so there was nothing for a population method to recover. What the positive results measure is the structured representation, not the search over it. A supplementary analysis produced the finding we think matters most for a human-computer interaction audience. The benefit of personalisation was largest exactly for those participants whose voice the un-personalised assistant reproduced worst (Spearman Ļ=ā0.61Ļ=-0.61, p=0.013p=0.013). Personalisation is worth most to the people the default serves least, which is a statement about who a system is for rather than about how well it scores. Figure 1: The inversion this paper proposes. Left: current personalisation accumulates preferences observed at the surface and reinserts them, so an unseen task has no covering note and a stale note cannot be re-interpreted. Right: aum stores the comparatively stable personality structure and derives the situational preference at generation time, retrieving only the fields the task needs. Figure 1 states the inversion in one picture. The remainder of the paper is organised as follows. Section 2 situates the work. Section 3 defines personality, preferences and persona and introduces seepage. Section 4 specifies aum. Section 5 formalises personality-aware retrieval. Sections 6 and 7 present the simulation study and its results. Section 8 reports the scaling study. Section 9 discusses implications and limitations, and Section 11 concludes. Appendices give the full specification, every prompt used, the persona set and the complete statistical tables. 2 Related Work 2.1 User models as components in adaptive systems The idea that a user model should be a separable, inspectable component predates the systems this paper is about. Kobsa (2001) surveyed generic user modelling systems and argued for a shared server holding assumptions about the user, queried by applications rather than duplicated inside them. Brusilovsky and MillĆ”n (2007) developed the same position for adaptive hypermedia and educational systems, where an overlay model over a domain structure gives the adaptation something explicit to reason about. Information retrieval developed a parallel but distinct tradition, in which the user model is a statistical summary of behaviour rather than a schema: term vectors and topical distributions built from a desktop index (Teevan et al., 2005), click and query histories whose value for ranking turns out to vary sharply across queries (Dou et al., 2007), and a decomposition of behavioural evidence into short-term session signals and long-term interest (Bennett et al., 2012). Diversity-aware ranking developed alongside, first as maximal marginal relevance (Carbonell and Goldstein, 1998), then as an explicit evaluation concern (Clarke et al., 2008) and an optimisation target (Agrawal et al., 2009). aum belongs to the first tradition and borrows from the second. It is a schema, in Kobsaās sense, whose slots are declared in advance rather than induced from data. What it takes from information retrieval is the insight that a profile is only useful to the extent that a system can select from it, and that selecting well means trading relevance against redundancy. 2.2 Memory and personalisation in LLM assistants Recent work recasts personalisation of LLM assistants as memory management. MemGPT treats the model as an operating system with paged memory (Packer et al., 2023); generative agents combine memory, reflection and planning to produce believable behaviour (Park et al., 2023); medical and lifelong assistants coordinate short-term and long-term stores (Zhang et al., 2024a; Wang et al., 2024b). Closer to retrieval, cognitive personalised search couples an LLM with an efficient memory mechanism over query logs (Zhou et al., 2024), profile memory organises per-user summaries for reuse (Liao et al., 2026), and agent-driven retrieval personalises search results directly (Chhetri et al., 2026). A separate branch adapts model parameters per user rather than the context, through per-user parameter-efficient fine-tuning (Tan et al., 2024); a recent survey maps the whole space (Zhang et al., 2025). Evaluation has developed in step. LaMP (Salemi et al., 2024) and its long-form extension (Kumar et al., 2024) define personalisation as task-level retrieval over user history. PersonaBench shows that retrieval-augmented systems answer questions about private user data poorly even when given direct document access (Tan et al., 2025), and rating-prediction studies find that LLMs capture user preferences but in opaque ways (Kang et al., 2023; Huang et al., 2025). These systems answer how to store and fetch user-relevant content. aum answers a prior question: what the stored items should be, and how they should be organised so that fetching a few of them is enough. The two are complementary, and the pipeline of Section 5 is deliberately built from standard components so that the representation, rather than the machinery, is what is under test. 2.3 Context budgets and compression A structured user model of sixty fields cannot be injected on every turn. The problem of fitting useful conditioning into a bounded context has been attacked from the compression side: LLMLingua and its long-context successor learn to drop tokens from a prompt while preserving downstream performance (Jiang et al., 2023; Jiang et al., 2024), and selective-context methods prune low-information spans (Li et al., 2023). Our approach is complementary and operates a level up. Rather than compressing a fixed payload, we select which fields enter the payload at all, conditioned on the task. The two could compose: compression could shorten the eight fields that selection returns. 2.4 Personality: structure, stability, and its trace in language The Five-Factor Model provides the trait vocabulary most widely used in computational work (McCrae and John, 1992), with modern instruments including the BFI-2 (Soto and John, 2017), public-domain item pools (Goldberg et al., 2006) and very brief measures for settings where length is prohibitive (Gosling et al., 2003). Cross-cultural generalisation of the factor structure has been examined but remains a live concern (McCrae, 2002). We include Myers-Briggs type as a field inside Shell 1 because users often know their type, while noting that its psychometric properties are weak: the type dichotomies do not correspond to natural categories, and reliability across retests is poor (Pittenger, 2005; Stein and Swan, 2019; McCrae and Costa, 1989). This is precisely the argument for a schema in which an inventory is one field among many rather than the representation itself. That personality leaves a measurable trace in language is well established. Pennebaker and King (1999) showed that function-word use is a stable individual difference; Yarkoni (2010) related Big Five scores to word use across 100,000 words of blog text; Schwartz et al. (2013) moved from closed-vocabulary counting to open-vocabulary differential language analysis over social media, and the LIWC line of work supplies the standard closed-vocabulary instrument (Tausczik and Pennebaker, 2010; Boyd and Pennebaker, 2017). Prediction of traits from digital footprints reaches useful accuracy (Kosinski et al., 2013; Park et al., 2015), sometimes exceeding human judges given enough behavioural evidence (Youyou et al., 2015), though meta-analysis places the typical correlation more modestly (Azucar et al., 2018), and earlier attempts to model personality from social media profile data illustrate how far the field has moved (Goyal and Tawde, 2022). Within LLM research, trait recognition from text is feasible (Ji et al., 2023; Rao et al., 2023) and implicit persona can be modelled as a latent variable in dialogue (Cho et al., 2022), but the resulting representations are trait scores or latent vectors: neither modular nor inspectable. The reliance on self-report in Section 6 inherits a known limitation. Self and other observers know different things about a person, with the self better on internal states and observers better on externally visible traits (Vazire, 2010; Connelly and Ones, 2010), and self-report has long been criticised as a substitute for observed behaviour (Baumeister et al., 2007). We return to this in Section 9.5. 2.5 Structured user representations and human digital twins The closest contemporary architecture is the General User Model, which accumulates confidence-weighted natural-language propositions about a user from screen observations (Shaikh et al., 2025). Generative agents grounded in self-report interviews simulate individual humans better than demographic conditioning alone (Park et al., 2024), which is both the closest precedent for our representation and the precedent for our evaluation method. Both populate a representation bottom up, from observation or interview. aum is top down: it specifies the slots into which such observations should be organised, which is what makes a component-selection function over shells definable at all. The human digital twin literature pursues a superficially similar goal from an engineering direction, and a recent survey maps its scope (Lin et al., 2024). The personal informatics tradition in HCI supplies the complementary user-centred account of what it is like to live with a model of oneself: staged models of collection and reflection (Li et al., 2010), the lived-informatics revision that treats tracking as episodic rather than linear (Epstein et al., 2015), and evidence on how people without prior self-tracking experience engage with their own data (Rapp and Cena, 2016). aum differs from a digital twin in purpose. It is built for style-sensitive task completion, not identity substitution, and Section 9 argues that the distinction has consequences the twin framing obscures. 2.6 Scrutability, control, and the privacy of a user model If a system holds a model of a person, the person should be able to read it. Kay and Kummerfeld (2012) set out the drivers and principles for personalised systems that users can scrutinise and control, building on earlier work on scrutable adaptive hypertext (Czarkowski and Kay, 2002) and on interfaces for inspecting semantic user models (Bakalov et al., 2010). Cramer et al. (2008) found that transparency affected acceptance of a content-based recommender, and Harper et al. (2015) showed that giving users direct control over their recommendations changed both behaviour and satisfaction. Jeromela (2022) extends the question to intelligent personal assistants specifically. Mental-model work supplies the reason this matters: users arrive with expectations of conversational agents that the systems do not meet (Luger and Sellen, 2016; Mahmood et al., 2025), and their models of what an agent knows shape how they use it (Gero et al., 2020; Ngo et al., 2020). The privacy dimension is sharper for aum than for a preference list, because the content is more intimate. Contextual integrity supplies the governing frame: what matters is not secrecy but whether an information flow matches the norms of the context it came from (Nissenbaum, 2011). Empirically, users of LLM-based conversational agents disclose a great deal and reason about the risks only partially (Zhang et al., 2024b), and language models can leak personal information present in training data (Huang et al., 2022). On-device and federated approaches offer one architectural answer (Chen et al., 2019). Our position, developed in Sections 5 and 10, is that a budgeted payload converts local residence from a policy promise into a measurable property: if eight fields suffice, the other twenty-four never leave the device. 2.7 Writing assistance and the userās voice The application setting for this work is writing assistance, where the question of whose voice appears in the output is not incidental. CoAuthor documented human-LLM collaborative writing at scale (Lee et al., 2022); Wordcraft explored story writing with a model in the loop (Yuan et al., 2022); a recent design space synthesises the field (Lee et al., 2024) and a companion study aligns research directions with what writers actually ask for (Reza et al., 2025). The finding that most directly motivates aum is Jakesch et al. (2023): co-writing with an opinionated language model shifts the userās own expressed views. If a default assistant voice can move what a person says, then a system that instead conditions on a model of that person is not merely a convenience feature. 2.8 Selecting a subset under a budget Choosing k fields to maximise a payload score with a redundancy penalty is a constrained subset-selection problem. When such an objective is monotone submodular, the forward greedy algorithm carries the classical (1ā1/e)(1-1/e) guarantee (Nemhauser et al., 1978), which is why greedy is the right baseline rather than a straw man. Our objective, defined in Section 5, uses a mean rather than a sum and subtracts a mean pairwise similarity, so it is not submodular in general and the guarantee does not transfer; the empirical question of how close greedy comes is therefore live, and Section 8 answers it directly. Population-based metaheuristics are widely applied to subset selection, particularly feature selection (Xue et al., 2016; Nguyen et al., 2020). The artificial fish swarm algorithm (Li et al., 2002) models a population of agents executing prey, swarm and follow behaviours, and has accumulated a substantial literature of variants and applications (Neshat et al., 2014; Pourpanah et al., 2023). We use it, and we report that at the scale our simulation ran it did not earn its cost. We think reporting that is more useful than dropping the comparison, and Section 8 identifies the regime in which the answer changes. 2.9 Simulated participants and model-based judgement Using language models in place of human participants is now a small field with a sharp internal debate. Argyle et al. (2023) showed that conditioning on demographic backstories reproduces aggregate patterns in survey data, and Park et al. (2024) showed that grounding agents in structured self-report improves individual-level simulation. The critical literature is equally developed: Bisbee et al. (2024) document instability and misestimation in synthetic survey responses, and Wang et al. (2025) show that replacing human participants can misportray and flatten identity groups. We adopt simulation as a feasibility method with explicit limits, stated in Section 6.1, and we do not present any result here as evidence about human users. Model-based judgement carries its own hazards, all of which we control for by construction. Judges exhibit position bias (Wang et al., 2024a), self-preference for their own generations (Panickssery et al., 2024), and imperfect but usable agreement with human raters (Zheng et al., 2023; Chiang and Lee, 2023; Liu et al., 2023). Section 6.7 describes the specific controls: a judge from a different model family than the generator, per-trial option shuffling, and a judge that never sees the user model it is implicitly evaluating. For the automatic style measure we use authorship representations rather than semantic embeddings. LUAR learns universal authorship representations by contrastive training over authors (Rivera-Soto et al., 2021), extending earlier invariant representations of social-media users (Andrews and Bishop, 2019). The distinction matters here: a semantic embedding scores any two deadline-extension emails as similar because they are about the same thing, which is exactly the wrong invariance. Work on what authorship representations actually encode (Wang et al., 2023; Wegmann et al., 2022), on making style embeddings interpretable (Patel et al., 2023), and on robustness (Man and Nguyen, 2024) informs how we read the resulting numbers. Style-transfer evaluation supplies the broader methodological caution that automatic style metrics are easy to misreport (Mir et al., 2019; Ostheimer et al., 2023), and fine-grained linguistic control offers an alternative route to the same goal (Alhafni et al., 2024). 2.10 Cognitive architectures Finally, the design philosophy behind a fixed, modular schema comes from the cognitive architecture tradition. ACT-R (Anderson et al., 2004) and Soar (Laird, 2012) are long-standing arguments that explicit structure buys something that implicit competence does not, and Sun (2024) makes the case that such architectures and LLMs are complementary rather than competing. aum applies the philosophy not to cognition in general but to the narrower problem of representing the user inside an LLM-mediated system. 3 Personality, Preferences, Persona, and Seepage 3.1 Three terms used in a specific way Work on personalisation uses personality, preference and persona loosely and often interchangeably. Because the argument of this paper is precisely about the relation between them, we fix the terms. Personality is the structured set of stable, task-independent traits spanning the cognitive, affective, behavioural and social-contextual dimensions of a person. Stability is meant in the rank-order sense established empirically by Roberts and DelVecchio (2000): a personās position relative to others changes slowly, even where absolute levels drift with age and life events (Roberts et al., 2006; Specht et al., 2011). Preferences are the task-dependent outputs of personality applied to a particular decision context. āPrefers bullet points in status updatesā is a preference. It is downstream of conscientiousness, of a professional register learned in a particular workplace, and of a belief about what respects a readerās time; it is not itself any of those things. Persona is the externally perceived projection of personality through one channel: a professional profile, a social media account, a conference biography. Goffmanās account of self-presentation (Goffman, 1959) is the reference point, and the key property is that a persona is a selective and audience-dependent rendering rather than a compressed copy. aum models personality. Preferences are derived from personality and context at generation time. Personas are situational projections and are represented, when they are represented at all, as fields inside Shell 4. The ordering matters for a practical reason. If preferences are the stored unit, then every new task requires either a stored preference that happens to cover it or a guess. If personality is the stored unit, a preference for an unseen task is derivable, and a stale stored preference can be re-interpreted against a structure that did not change. The Paris example of Section 1 is exactly a case where the second operation was needed and unavailable. 3.2 Personality seepage Table 1: Personality seepage on a single task: an email requesting a deadline extension from a colleague. Three users phrase the same underlying request differently and the assistant mirrors each surface. The third column is the point: what the generic response misses is in each case a property of the user, not of the prompt. User Prompt surface (abridged) What the generic response misses U1: organised, meticulous āCurrent deadline Friday 5pm; requested Monday 5pm. Reason: data validation overran scope. Offer: draft by Saturday.ā The structure is right and the dates are carried through, but the reply drops the acknowledgement of the reviewerās effort that U1 includes in every message they send. Nothing in the prompt asks for it. U2: empathetic, verbose āCould you help me write a friendly note to a colleague? I feel a bit bad asking, but maybe we could push the Q3 deadline.ā The reply amplifies the apology into self-deprecation. U2ās phrasing invites it; U2ās stated values reject it. Mirroring the surface overshoots the person. U3: concise, informal āemail to ask for more time on a report, colleague, Q3 stuff. make it not too formal.ā Brevity is preserved and so is the omission: no date and no reason, the two things U3 habitually leaves out of a first draft and reliably needs by the second. Table 1 illustrates a phenomenon we call personality seepage. When a person writes a prompt, their linguistic and behavioural patterns go into the prompt with them, and the model amplifies those patterns in its output. That the trace is there is not in doubt: function-word use is a stable individual difference (Pennebaker and King, 1999), and personality is recoverable from text at useful accuracy (Yarkoni, 2010; Schwartz et al., 2013). The trouble is what the assistant does with it. It matches the surface without access to what produced the surface. Three consequences follow, and each appears in Table 1. 1. Gaps are not filled. Whatever the user habitually omits from a prompt is also absent from the output, because the model has no independent source for it. U3ās missing deadline is the example. 2. Surface features are over-extrapolated. A hedging register in the prompt becomes a hedging register in the output, amplified, because the model treats the surface as the target rather than as evidence. U2ās apology is the example. 3. Stable habits are not reproduced. Regularities the user applies across every instance of a genre, which never appear in any single prompt because the user assumes them, are invisible. U1ās crediting of collaborators is the example. Seepage also explains a common subjective experience: a generic assistant feels briefly personalised, because it does echo something real about the user, and then fails on exactly the parts of a task the user did not spell out. The echo is real; the model beneath it is absent. 3.3 Why accumulating preferences treats the symptom The remedy that deployed systems offer for seepage is to accumulate preference notes from past conversations and reinsert them. This is a reasonable engineering response to the observation that the assistant forgets, and it does address forgetting. It does not address seepage, because the notes are observed at the level of preferences while the cause of variation across users sits one layer below. Two properties of accumulated notes make this concrete. First, they are topically bound: a note distilled from a conversation about choosing a laptop is about laptops, and generalises to an unrelated writing task only by accident. Section 7 gives an empirical form of this observation, in that the preference-notes condition was not distinguishable from chance on forced-choice identification of the userās own voice. Second, they are uninterpretable against each other: a flat list has no structure that would let a system notice that two notes conflict, or that one has gone stale, or that a third is a surface expression of the same underlying disposition as the first two. Structure is what makes those operations definable, which is the argument for a schema and the subject of the next section. 4 The Atomic User Model 4.1 The metaphor, and what it commits us to aum represents a person as a Nucleus surrounded by four shells, on the metaphor of an atom with a stable centre and reactive outer layers (Figure 3). The metaphor is doing work rather than decorating, and it commits the representation to two properties that a flat schema cannot express. Differential stability. Identity is stable while behaviour adapts. The Nucleus changes on the timescale of years, the inner shells on months, the outer shells on weeks. A representation that treats every field as equally durable will either refresh core values as often as it refreshes a communication habit, which is wasteful and invasive, or refresh a communication habit as rarely as it refreshes core values, which makes it wrong. Differential observability. A stranger sees the outermost shell, a colleague sees more, a close friend or family member sees much more, and the Nucleus is visible only to the self. This layering echoes the onion model of social penetration theory (Altman and Taylor, 1973; Carpenter and Greene, 2015), and it has a direct computational consequence: the fields most useful for deep personalisation are exactly the fields most costly to expose. A representation that does not encode the gradient cannot reason about the trade-off. Both properties bear on Section 5. The first motivates differential update rates as a field attribute. The second is why a budgeted payload is a privacy mechanism and not only an efficiency one. Figure 2: Differential stability across tiers. The nominal update period Ļ falls from years at the Nucleus to weeks at Shell 4, while observability by others rises in the opposite direction. A schema that does not encode this gradient cannot express a refresh policy, and cannot reason about the cost of exposing a field. Figure 3: The Atomic User Model. A Nucleus of core identity is surrounded by four shells. Example fields per shell are shown in italics. Stability decreases and observability by others increases from the centre outwards. 4.2 Formal definition The aum of a user u is a set of typed fields Au=f1,f2,ā¦,fn,A_u=\f_1,f_2,ā¦,f_n\, (1) where each field fif_i is a tuple fi=āØshellā”(fi),nameā”(fi),valueā”(fi),Ļā”(fi)ā©.f_i= \,shell(f_i),\;name(f_i),\;value(f_i),\;Ļ(f_i)\, . (2) Here shellā”(fi)āshell(f_i) with =Nucleus,Sāhāeālālā1,Sāhāeālālā2,Sāhāeālālā3,Sāhāeālālā4,CrossShell,S=\Nucleus,\,Shell~1,\,Shell~2,\,Shell~3,\,Shell~4,\,CrossShell\, (3) nameā”(fi)name(f_i) is a fixed slot name drawn from the specification, valueā”(fi)value(f_i) is a short natural-language string, and Ļā”(fi)Ļ(f_i) is a nominal update period. Three properties of this definition are load-bearing. 1. Values are natural language, not vectors. A field reads āI credit whoever reviewed a draft before I ask them for anything elseā, not a coordinate. This is what makes the model scrutable in the sense of Kay and Kummerfeld (2012): the user can read, edit or delete any field without an interpretation layer. 2. Slots are declared in advance. The set of (shell,name)(shell,name) pairs is fixed by the specification, so two usersā models are structurally comparable and a selection function over shells is definable. This is the property that distinguishes aum from bottom-up accumulations of free-form propositions (Shaikh et al., 2025). 3. Update rate is a field attribute. Ļ ranges over years for Nucleus fields, months for Shell 1 and Shell 2, and weeks for Shell 3 and Shell 4. We do not specify an update mechanism in this paper and return to the omission in Section 9.5. 4.3 The five tiers Nucleus: core identity. The Nucleus holds what changes most slowly and what, if changed, makes the person a different agent: core values, fundamental beliefs about self, others and life, identity anchors of the form āI am the kind of person who ā¦ā, a moral framework, existential orientation, and life purpose. The framing follows Eriksonās account of identity (Erikson, 1968). Operationally, a Nucleus field is one whose violation the user would describe as being untrue to themselves rather than as an inconsistency. Shell 1: psychological core. Shell 1 explains how the Nucleus is expressed. It holds personality structure, incorporating but not reducing to inventories such as the Five-Factor Model (McCrae and John, 1992; Soto and John, 2017); emotional architecture; the attachment system (Bowlby, 1969); motivational drivers; a fear map; and stress response. Trait inventories, including Myers-Briggs type where a user knows it, are fields inside Shell 1, not substitutes for the model. Given the psychometric objections to type-based instruments (Pittenger, 2005; Stein and Swan, 2019), a schema that demotes an inventory to one field among thirty-two is a feature rather than a compromise. Shell 2: cognitive and experiential. Shell 2 is life history as it bears on cognition: formative experiences, a record of difficult episodes, learning style, cognitive style, the personal narrative the user tells about their own life, and knowledge base. It is the tier that explains why a given Shell 1 profile produces the particular Shell 3 behaviours it does in this particular person. Shell 3: behavioural patterns. Shell 3 holds daily habits, communication patterns, decision behaviour, coping mechanisms, relationship behaviour and work habits. This is the tier most often mistaken for personality in deployed systems, because it is the tier that observation reaches. It is the output of the inner shells, not their cause, which is why a system that models only Shell 3 can predict what a user did and not what they would do in a situation it has not seen. Shell 4: social and contextual. Shell 4 is the interface to the world: social roles, cultural conditioning, digital identity, reputation, the social mask a person presents (Goffman, 1959), and register range. Most LLM personalisation today operates on the outer half of Shell 4, because that is the part chat history exposes. Cross-shell integration. Three entries sit across tiers rather than inside one. Internal conflicts record cases where a Shell 3 behaviour contradicts a Nucleus value, which is the machinery that lets a system notice that a stored preference is out of character rather than merely old. Growth trajectory records the direction of deliberate change. The authenticity index measures alignment between what the inner shells hold and what the outer shells present, and is the field a system would consult before, for example, matching a userās professional register in a private message. 4.4 The full specification and the reduced instrument The full specification holds approximately sixty fields across the five tiers plus cross-shell entries; Appendix A lists it. The studies in this paper use a reduced 32-field instrument, six fields per tier plus two cross-shell entries, shown in Table 2. The reduction was made for a practical reason: a simulated participant completing sixty fields in character produces noticeably thinner answers per field than one completing thirty-two, and we preferred fewer, denser fields. Section 8 examines what happens to retrieval as the instrument grows towards the full size. Table 2: The reduced 32-field instrument used in both studies. Six fields per tier plus two cross-shell entries. Update period Ļ is the nominal refresh interval for the tier. Tier Ļ Fields Nucleus years Core Values; Fundamental Beliefs; Identity Anchors; Moral Framework; Existential Orientation; Life Purpose Shell 1 psychological months Big Five Profile; Emotional Architecture; Attachment Style; Motivational Drivers; Fear Map; Stress Response Shell 2 cognitive months Formative Experiences; Difficult Episodes; Learning Style; Cognitive Style; Life Narrative; Knowledge Base Shell 3 behavioural weeks Daily Habits; Communication Patterns; Decision Behaviour; Coping Mechanisms; Relationship Behaviour; Work Habits Shell 4 social weeks Social Roles; Cultural Conditioning; Digital Identity; Reputation; Social Mask; Register Range CrossShell months Internal Conflicts; Authenticity Index 4.5 Two design commitments Local residence. aum contains inner-shell content of a kind that has no analogue in a preference list. It should reside on the userās device or in a user-controlled vault, never in a third-party log. We state this as an architectural commitment rather than a policy preference because the retrieval design of Section 5 makes it enforceable: only the selected payload need ever leave the device, and Section 7 measures how small that payload can be without loss. Contextual integrity (Nissenbaum, 2011) gives the frame for what such a boundary is for. User authorship. Every field is a human-inspectable string that the user can read, edit or delete. This places aum in the scrutable-personalisation tradition (Kay and Kummerfeld, 2012; Czarkowski and Kay, 2002; Bakalov et al., 2010) and answers the interpretability objection to trait-vector user models (Ji et al., 2023; Kang et al., 2023). A budgeted payload strengthens the commitment: eight short strings are few enough to show the user before they are sent, where thirty-two are not. 5 Personality-Aware Retrieval aum is a representation of a person; it requires a pipeline to be useful. This section specifies one, in which aum is treated as an index over a person and queried under a context budget rather than injected wholesale. Figure 4: The personality-aware retrieval pipeline. A task classifier routes simple requests around the user model entirely. Complex requests pass through component selection, which restricts the search to the shells the task type touches, and then through a budgeted retrieval that returns k fields. The aum store remains on the userās device; only the payload leaves it. 5.1 The four stages Given a prompt q from user u, the pipeline of Figure 4 proceeds as follows. (i) Task identification. A classifier assigns q a task type t and a complexity label. A request is simple if a correct answer is the same regardless of who asked, such as a unit conversion or a factual lookup, and complex if the form of an acceptable answer depends on who is asking. Simple requests bypass the user model, which matters both for latency and for disclosure: a system that consults an intimate user model to convert kilometres into miles is leaking for no benefit. Section 7.7 reports how accurately this stage runs. (i) Component selection. A selection function Ļ:ā2Ļ:Tā 2^S restricts the search space to the shells that a task type touches. The mapping used throughout is given in Table 3; CrossShell is always admissible. The admissible pool is poolā”(t)=i:shellā”(fi)āĻā”(t)āŖCrossShell.pool(t)=\\,i:shell(f_i)āĻ(t)āŖ\CrossShell\\,\. (4) If |poolā”(t)|<k+4|pool(t)|<k+4 the pool is topped up with the most query-relevant fields from outside Ļā”(t)Ļ(t). Without this top-up a large k would silently collapse to āevery field Ļā”(t)Ļ(t) admitsā, which would make the k=16k=16 condition a different experiment from the k=4k=4 and k=8k=8 conditions rather than a third point on one curve. Table 3: The component-selection function Ļā”(t)Ļ(t). CrossShell is admissible for every complex task type. Factual requests are routed around the user model entirely, which is what the empty set denotes. Task type t Ļā”(t)Ļ(t) communication Shell 3, Shell 4 self-presentation Shell 4, Nucleus, Shell 1 relational-evaluative Shell 1, Shell 3, Nucleus planning-decision Shell 3, Shell 1, Shell 2 explanatory Shell 2, Shell 3 creative Shell 1, Shell 2 factual (simple) ā (bypass) (i) Retrieval. A retriever selects a payload Pā”(q,u,k)āAuP(q,u,k) A_u with |P|=kāŖn|P|=k n by maximising the objective of Section 5.2 over poolā”(t)pool(t). (iv) Generation. The model is conditioned on (q,P)(q,P). The payload is inserted as a delimited block ahead of the userās request; the exact template is in Appendix B. 5.2 The payload objective Let if_i denote an embedding of field i and q an embedding of the query, both ā2 _2-normalised. The obvious objective is mean relevance, Frelā(S)=1|S|āāiāScosā”(i,),F_rel(S)= 1|S| _iā S (f_i,q), (5) but this is separable: it decomposes into per-item scores, so its exact maximiser over a pool is obtained by sorting, and no search is required or useful. Under a context budget, mean relevance is also the wrong objective. Eight near-duplicate fields waste seven slots, and a budgeted payload should therefore trade relevance against diversity in the manner of maximal marginal relevance (Carbonell and Goldstein, 1998) and of result diversification more broadly (Clarke et al., 2008; Agrawal et al., 2009). We use Fā”(S)=1|S|āāiāScosā”(i,)ārelevanceāĪ»ā1|S|ā(|S|ā1)āāi,jāSiā jcosā”(i,j)āredundancy,F(S)\;=\; 1|S| _iā S (f_i,q)_relevance\;-\;Ī»\, 1|S|\,(|S|-1) _ subarrayci,jā S\\ iā j subarray (f_i,f_j)_redundancy, (6) with Ī»ā„0λ℠0 the redundancy weight, and the payload is Pā”(q,u,k)=argā”maxSāpoolā”(t)|S|=kā”Fā”(S).P(q,u,k)\;=\; _ subarraycS (t)\\ |S|=k subarrayF(S). (7) At Ī»=0Ī»=0, Equation 6 reduces to Equation 5 and the problem is a sort. For Ī»>0Ī»>0 the redundancy term couples the items and the problem becomes combinatorial, with (|poolā”(t)|k) |pool(t)|k candidate payloads and no closed form. We use Ī»=0.15Ī»=0.15 throughout, and Section 8 reports what changes as Ī» varies. Two remarks on the structure of the objective. First, because it uses a mean rather than a sum and subtracts a mean pairwise similarity, it is not monotone submodular in general, so the classical greedy guarantee of Nemhauser et al. (1978) does not transfer; how close greedy comes is an empirical question, answered in Section 8. Second, the redundancy term is defined over the payload only, not over the userās history, which is what distinguishes it from novelty in a search result list. 5.3 Retrievers Four retrievers are implemented, plus exhaustive search wherever the search space is small enough to enumerate. Dense top-k. Take the k highest-relevance fields, ignoring redundancy. This is the retrieval-augmented generation default and is the exact maximiser of Equation 5. Cost: one objective evaluation. Forward greedy. Start from S=ā S= and repeatedly add the field that most increases F. Cost: Oā”(kā |pool|)O(kĀ·|pool|) objective evaluations. Strong, cheap and deterministic; it is the baseline that matters. Random k. Draw k fields uniformly from poolā”(t)pool(t). This is a control rather than a method. Without it, an improvement for a retrieved payload is equally consistent with the hypothesis that any k short strings about the user help, which is not the claim under test. Artificial fish swarm. A population of p fish, each a k-subset of the pool, evolves for T iterations under three behaviours drawn from Li et al. (2002). Algorithm 1 gives the procedure. In prey, a fish attempts up to try random local swaps and accepts the first improvement, falling back to a random walk. In swarm, a fish moves toward the centre of its visual neighbourhood if that centre is better and the neighbourhood is not crowded. In follow, it moves toward the best neighbour under the same conditions. Distance between fish is dā”(a,b)=1ā|aā©b|/kd(a,b)=1-|aā© b|/k, and a move toward a target replaces the lowest-relevance member of the current subset with a member of the target. The global best is retained, so the returned payload never degrades across iterations. In the simulation study we use p=12p=12, T=8T=8, visual =6=6, =4try=4 and crowd factor 0.750.75; Section 8 shows that this fixed budget is the source of the algorithmās weakness rather than the behaviours are. Algorithm 1 Artificial fish swarm over k-subsets 1: pool P, budget k, objective F, population p, iterations T, visual v, tries try, crowd Ī“ 2: payload SāS with |Sā|=k|S |=k 3: PopāS1,ā¦,SpPopā\\,S_1,ā¦,S_p\,\, each a uniform random k-subset of P 4: Sāāargā”maxSāPopā”Fā”(S)S ā _S F(S) 5: for ι=1 =1 to T do 6: for all SāPopS do 7: CāPreyā(S)Cā\\, Prey(S)\,\ 8: NāSā²āPop:Sā²ā S, 1ā|Sā©Sā²|/kā¤v/kNā\\,S :S ā S,\;1-|Sā© S |/k⤠v/k\,\ 9: if Nā ā Nā and |N|/pā¤Ī“|N|/pā¤Ī“ then 10: ScāS_cā the k most frequent members across N ā³ swarm centre 11: if Fā”(Sc)>Fā”(S)F(S_c)>F(S) then CāCāŖMoveTowardā(S,Sc)Cā CāŖ\\, MoveToward(S,S_c)\,\ 12: end if 13: Sbāargā”maxSā²āNā”Fā”(Sā²)S_bā _S ā NF(S ) 14: if Fā”(Sb)>Fā”(S)F(S_b)>F(S) then CāCāŖMoveTowardā(S,Sb)Cā CāŖ\\, MoveToward(S,S_b)\,\ 15: end if 16: end if 17: Sāargā”maxSā²āCāŖSā”Fā”(Sā²)Sā _S ā CāŖ\S\F(S ) 18: end for 19: Sāāargā”maxā”Fā”(Sā),maxSāPopā”Fā”(S)S ā \\,F(S ),\; _S F(S)\,\ ā³ elitism 20: end for 21: return SāS 22: 23: function Prey(S) 24: for r=1r=1 to try do 25: Sā²āS ā S with one or two members replaced at random from āSP S 26: if Fā”(Sā²)>Fā”(S)F(S )>F(S) then return Sā²S 27: end if 28: end for 29: return S with one member replaced at random ā³ random walk 30: end function 31: 32: function MoveToward(S, StS_t) 33: replace argā”miniāSā”cosā”(i,) _iā S (f_i,q) with a uniformly chosen member of StāS_t S 34: return the result 35: end function 5.4 Why local residence becomes measurable The design objective is to maximise style fidelity subject to |P|ā¤k|P|⤠k. That constraint is what separates aum from a prompt prefix, and it is where the commitments of Section 4 stop being rhetorical. If k fields suffice, the remaining nākn-k never leave the device, and the disclosure per query is bounded by construction rather than by policy. The size of the achievable k is therefore not only an efficiency number but a privacy number, and Section 7 measures it. 6 Simulation Study: Design 6.1 Why simulate, and what a simulation can establish Participants in this study are language-model-simulated, not human. We state this first, and repeat it in the abstract, because it governs how every number in Section 7 should be read. The method has a precedent and a critique, and both are relevant. Argyle et al. (2023) showed that conditioning a language model on demographic backstories reproduces aggregate patterns found in human survey data, and Park et al. (2024) showed that grounding agents in structured self-report improves individual-level simulation over demographic conditioning alone, which is the closest precedent for what we do here. Against this, Bisbee et al. (2024) document instability and misestimation in synthetic survey responses, and Wang et al. (2025) show that replacing human participants can misportray and flatten identity groups. We therefore fix what the study is for. A simulation of this kind can establish that a pipeline runs end to end; that a budgeted retrieval over a structured user model recovers fields that a downstream generator uses; that the resulting text differs measurably from text produced without the model; and that this holds under controls which rule out the most obvious alternative explanations. It cannot establish that a real person recognises their own voice, because the entity doing the recognising here is a judge model reading a persona description, which is a considerably easier task. It also cannot speak to how a person would feel about a system holding such a model, which is a question for the human study described in Section 9.6. There is a second and less obvious reason to simulate first. The human study this substitutes for would require participants to disclose inner-shell content about themselves: fears, difficult episodes, moral commitments. Running that study before knowing whether the architecture works at all would spend real disclosure on a question that a simulation can answer. We regard establishing feasibility in simulation as the ethically prior step, not merely the cheaper one. 6.2 Simulated participants Sixteen personas are declared in code rather than sampled by a model, so that a run is reproducible from a seed and the population is auditable. Each persona carries Big Five z-scores in [ā2,2][-2,2], a one-line life context, a formative-experience seed on which Shell 2 can draw, and concrete idiolect markers, which are what make style measurable rather than merely asserted. The z-scores were spread deliberately: no two personas share a sign pattern across all five traits, and every trait has both tails represented, so that style differences are not confounded with a single dominant axis. Table 4 lists the set. Appendix C gives the full declarations. Table 4: The sixteen simulated participants. Big Five z-scores are shown as O/C/E/A/N. Idiolect markers are abbreviated; the full declarations are in Appendix C. # Label O/C/E/A/N Idiolect markers (abridged) 0 meticulous planner +0.2/+1.8/ā0.6/+0.4/+0.9+0.2/+1.8/-0.6/+0.4/+0.9 numbered points, explicit dates, ask in first sentence 1 warm over-explainer +0.6/+0.1/+1.1/+1.7/+0.5+0.6/+0.1/+1.1/+1.7/+0.5 long pleasantries, hedges, pre-emptive apology, āweā for āIā 2 blunt minimalist +0.3/+0.8/ā0.9/ā1.4/ā0.7+0.3/+0.8/-0.9/-1.4/-0.7 lowercase, fragments, no greeting or sign-off, two lines 3 associative creative +1.9/ā0.8/+0.7/+0.6/+0.3+1.9/-0.8/+0.7/+0.6/+0.3 starts mid-thought, parentheses, concrete images, ends early 4 analytical flat +0.9/+1.3/ā1.2/ā0.5/ā0.9+0.9/+1.3/-1.2/-0.5/-0.9 conclusion first, quantifies, āapproximatelyā, no exclamations 5 bright energetic +1.0/+0.2/+1.9/+1.2/ā0.4+1.0/+0.2/+1.9/+1.2/-0.4 exclamations, short punchy sentences, direct address 6 dry sceptic +1.1/+0.6/ā0.5/ā1.1/+0.8+1.1/+0.6/-0.5/-1.1/+0.8 understatement, undercutting asides, rhetorical questions 7 formal correct ā0.3/+1.5/ā0.2/+0.9/+0.2-0.3/+1.5/-0.2/+0.9/+0.2 full salutations, passives, āI should be grateful ifā, no contractions 8 scattered fast +1.4/ā1.6/+1.3/+0.3/+1.1+1.4/-1.6/+1.3/+0.3/+1.1 mid-paragraph topic changes, follow-up corrections, abbreviations 9 nurturing relational +0.4/+0.3/+0.5/+1.9/+0.7+0.4/+0.3/+0.5/+1.9/+0.7 names the otherās feeling first, softens every imperative 10 competitive driver +0.5/+1.4/+1.2/ā1.3/ā0.5+0.5/+1.4/+1.2/-1.3/-0.5 power verbs, deadlines as commitments, reframes asks as opportunities 11 reflective introvert +1.2/+0.9/ā1.8/+0.8/+0.6+1.2/+0.9/-1.8/+0.8/+0.6 short paragraphs with pauses, precise word choice, no small talk 12 storytelling extrovert +1.3/ā0.2/+1.7/+1.0/ā0.2+1.3/-0.2/+1.7/+1.0/-0.2 opens with a scene, second person, builds to the ask, quotes dialogue 13 pragmatic efficient ā0.4/+1.6/+0.1/+0.2/ā1.0-0.4/+1.6/+0.1/+0.2/-1.0 imperatives, concrete nouns, one line per item 14 quirky metaphorical +1.8/+0.4/+0.3/+0.7/+0.4+1.8/+0.4/+0.3/+0.7/+0.4 cross-domain comparisons, semicolons, deliberate archaisms 15 stoic calm +0.1/+1.0/ā0.7/+0.5/ā1.8+0.1/+1.0/-0.7/+0.5/-1.8 even sentence length, no intensifiers, facts then action 6.3 Instrument population Each persona completes the 32-field instrument of Table 2 in character, by guided self report: the agent is instructed to fill every field with one short first-person sentence of roughly ten to twenty-five words, specific and concrete rather than generic. Responses are parsed against the declared schema and rejected if any shell is missing or any field is empty, with up to six retries and an explicit corrective instruction on each. The exact prompt is in Appendix B. Populating a user model by self report inherits a known limitation: self and other observers know different things about a person, and the self is not the better source for every trait (Vazire, 2010; Connelly and Ones, 2010). For a simulated participant whose ground truth is a declared persona this is less severe than it would be for a human, since the agent has access to its own declaration, but the resulting instrument is still a self-description rather than an observation. Section 9.5 returns to what this means for a human deployment. 6.4 Task battery, prompt surfaces, and references Six style-sensitive tasks form the evaluation battery, chosen to span the task types of Table 3: requesting a deadline extension (communication), declining an invitation from a colleague (communication), writing a short public post about oneās work (self-presentation), giving written feedback on a junior collaboratorās draft (relational-evaluative), planning a two-day trip (planning-decision), and explaining a technical result to a friend outside the field (explanatory). Four additional simple tasks, all factual lookups, exist only to exercise and score the classifierās simple-versus-complex branch and are excluded from the main results. Table 5 lists the battery. Table 5: The task battery. The six complex tasks form the evaluation set. The four simple tasks are used only to score the classifierās routing decision and never enter the main results. ID Task Type T1 Requesting a deadline extension from a colleague communication T2 Declining an invitation from a colleague communication T3 Writing a short public post about your work self-presentation T4 Giving written feedback on a junior collaboratorās draft relational-evaluative T5 Planning a two-day trip planning-decision T6 Explaining a technical result to a friend outside the field explanatory S1 to S4 Four factual lookups (boiling point, unit conversion, date, arithmetic) factual For each complex task an agent produces two texts, in an order that is the single most important correctness property of the design. 1. The prompt surface: the message this person would type to an assistant, in their own voice, at their own level of detail and formality, capped at sixty words. This is the personality-seepage surface of Section 3, and it is the only user-derived text the retriever ever sees. 2. The reference: what this person would write themselves, with no assistant involved, matching their usual length, structure and habits. This is the ground truth against which every condition is scored, and it is generated without sight of the prompt surface. Passing the reference to the retriever would give every aum-r condition an oracle that the Full aum and preference-notes baselines never receive, and would make the comparison meaningless. The separation is enforced in code. 6.5 The preference-notes baseline The baseline that matters is not the generic assistant but the flat preference notes that deployed memory features actually store, so it has to be built the way such features build it. Each agent generates four short transcripts of past assistant conversations, four to six turns each, on topics drawn from a held-out list that shares no item with the evaluation battery: choosing between two laptops, a recurring appliance problem, a week of simple meals, what to do with a free Saturday, picking a book, and replying to an awkward group message. A separate summariser, with no access to the persona and no access to the aum, then reads those transcripts and writes at most twelve flat preference bullets. Two decisions here are deliberate. The topics are held out so that the baseline cannot contain a rehearsal of the evaluation tasks. The summariser is blind to the persona and the user model so that the baseline is a lossy distillation of observed conversation, which is what a deployed system has, rather than a partial copy of the treatment, which is what concatenating Shell 3 and Shell 4 fields would produce. 6.6 Conditions Ten conditions, all sharing a base model and a prompt, split into a main block and a control block (Table 6). Table 6: Conditions. The main block appears in Table 8; the control block isolates one component at a time and appears in Table 10. Only the four conditions marked id are shown to the identification judge. Condition Block Injected beyond the prompt Generic id main Nothing Preference notes id main Flat bullets distilled from four held-out prior conversations Full aum id main All 32 fields as JSON aum-r, k=4k=4 main Ļā”(t)Ļ(t) + swarm retrieval, four fields aum-r, k=8k=8 id main Ļā”(t)Ļ(t) + swarm retrieval, eight fields aum-r, k=16k=16 main Ļā”(t)Ļ(t) + swarm retrieval, sixteen fields Random k=8k=8 control Eight fields drawn uniformly from the same admissible pool No Ļā”(t)Ļ(t), k=8k=8 control Swarm retrieval over all shells, no component selection Dense top-k, k=8k=8 control Relevance-only top eight, redundancy term removed Greedy, k=8k=8 control Forward greedy on the same objective Each control removes exactly one component, so that a null result localises. Random k separates āthe right fieldsā from āany k fields about the userā. No Ļā”(t)Ļ(t) asks whether component selection contributes beyond retrieval. Dense top-k asks whether the redundancy term earns its place. Greedy asks whether the swarm earns its cost. 6.7 Measures Fidelity. A judge model rates, on a five-point scale, the statement that a candidate text reads like something the person would have written. The judge sees the persona and one text the person genuinely wrote, and never sees the aum. Withholding the user model from the judge is not incidental: showing it would present the judge with the same fields the aum-r payload contained, allowing it to reward surface agreement with the payload rather than similarity to the person. Identification. A forced choice among the four id conditions, presented in an order shuffled per trial, with chance at 25%. The judge again sees the persona and the reference. Position bias in LLM judges is documented (Wang et al., 2024a), so option order is randomised per trial and tested post hoc in Section 7.7. Style similarity. The cosine between LUAR authorship embeddings (Rivera-Soto et al., 2021) of the candidate and the participantās own reference, computed locally. Authorship representations are used rather than semantic embeddings for a specific reason: a semantic embedding scores any two deadline-extension emails as highly similar because they are about the same thing, and the property we need is sensitivity to who wrote a text and insensitivity to what it is about (Wegmann et al., 2022; Wang et al., 2023). The pipeline raises rather than falling back if the authorship model cannot be loaded, because a silent substitution would change what the column means while leaving its heading intact. A semantic cosine is computed in addition and reported separately, never as style similarity. Context. The number of tokens in exactly the string prepended to the prompt, counted with the generatorās own tokeniser. This is a measurement, not a word count, so that the ratio reported in Section 7 is exact. Judge independence. The judge model differs from the generator by construction, and the pipeline refuses to run otherwise. LLM evaluators favour their own generations (Panickssery et al., 2024), so a run in which judge and generator coincide produces a fidelity column that mostly measures self-preference. 6.8 Models, seeds and cost Table 7 records the configuration. Every API call is cached on disk under a hash of its arguments, so a re-run after a crash or a code change costs nothing for work already completed, and the run is reproducible from the manifest plus a seed. Table 7: Reproducibility record for the simulation study. Token and cost figures are read from the run ledger, not estimated. Item Value Generator model (also plays the participant) gpt-5.6-luna Judge model (fidelity and identification) gpt-5.6-terra Field and query embeddings text-embedding-3-small Authorship-style embeddings rrivera1849/LUAR-MUD, run locally on CPU Generation temperature 0.7 Persona temperature 0.8 Judge temperature 0.0 Participants Ć tasks Ć seeds 16Ć6Ć316Ć 6Ć 3 Seeds 0, 1, 2 Conditions 10 Instrument size n 32 fields Redundancy weight Ī» 0.15 Swarm population, iterations 12, 8 Total API calls 13,281 Input tokens 3,869,382 Output tokens 760,598 Total cost USD 4.81 6.9 Analysis plan The unit of analysis is the (participant, task) cell averaged over seeds, giving 16Ć6=9616Ć 6=96 paired observations per condition. Seeds are repeated measures of the same cell rather than additional participants, so averaging before testing is what keeps the degrees of freedom honest; treating three seeds Ć 96 cells as 288 independent observations would inflate every test. For each planned contrast we report the mean paired difference, a 95% bootstrap confidence interval over 10,000 resamples, a paired t statistic, a Wilcoxon signed-rank statistic, Cohenās dzd_z and Cliffās delta. The Wilcoxon test is primary for fidelity, because a five-point rating scale is ordinal; the paired t is primary for the continuous style measure. The Holm procedure corrects within metric. Identification uses an exact binomial test against 25% chance with a Wilson interval. Contrasts were fixed before the run and are those listed in Section 7. Supplementary analyses reported in Section 7.7 were specified after inspecting the main results and are labelled as such; we do not present them as confirmatory. 7 Simulation Study: Results 7.1 Main comparison Table 8 gives the main block, and Table 10 the planned contrasts. Three findings carry the section. Table 8: Main results. Fidelity and identification are judge ratings on behalf of simulated participants; style is LUAR authorship cosine against the participantās own reference; semantic is a general-purpose embedding cosine, reported for comparison only and never as style; context is tokens injected beyond the prompt. Means over 16Ć6=9616Ć 6=96 cells and three seeds, with 95% bootstrap intervals on fidelity. Condition Fidelity 95% CI Ident. Style Context (1 to 5) (%) (LUAR) (tokens) Generic (prompt only) 2.65 [2.45, 2.84] 06.9 0.674 000 Preference notes 2.68 [2.48, 2.88] 14.9 0.684 0164 Full aum (all 32 fields) 2.90 [2.71, 3.08] 35.4 0.705 915 aum-r, k=4k=4 2.86 [2.68, 3.06] n/a 0.701 0111 aum-r, k=8k=8 (ours) 2.91 [2.74, 3.09] 42.7 0.698 0211 aum-r, k=16k=16 2.98 [2.78, 3.17] n/a 0.701 0406 Controls, all at k=8k=8 Random k fields 2.89 [2.69, 3.07] n/a 0.697 0211 No Ļā”(t)Ļ(t) 2.95 [2.75, 3.14] n/a 0.703 0209 Dense top-k 2.92 [2.74, 3.10] n/a 0.699 0210 Greedy 2.95 [2.75, 3.14] n/a 0.700 0210 Finding 1: a budgeted payload matches the whole model at under a quarter of the context. aum-r at k=8k=8 was not distinguishable from Full aum on fidelity (Ī=+0.02 =+0.02, 95% CI [ā0.07,+0.11][-0.07,\,+0.11], p=1p=1 after Holm correction) while injecting 211 tokens against 915, that is 23.0%. Figure 5 plots the whole condition set against injected context on a logarithmic axis; the point of the figure is the vertical gap between preference notes and aum-r at comparable cost, and the horizontal gap between aum-r and Full aum at comparable fidelity. Finding 2: structure beats flat notes, by a moderate effect. aum-r at k=8k=8 exceeded preference notes on fidelity by +0.24+0.24 (95% CI [+0.14,+0.33][+0.14,\,+0.33], Wilcoxon W=376.5W=376.5, p=7.2Ć10ā5p=7.2Ć 10^-5 after Holm correction, dz=+0.50d_z=+0.50, Cliffās Ī“=0.35Ī“=0.35, n=96n=96 cells), and exceeded the generic baseline by +0.27+0.27 (dz=+0.57d_z=+0.57). On LUAR style similarity the same ordering holds with a smaller effect: +0.013+0.013 over preference notes (p=0.006p=0.006) and +0.024+0.024 over generic (p<10ā5p<10^-5, dz=+0.53d_z=+0.53). Full aum also beat preference notes (+0.22+0.22, p=4Ć10ā4p=4Ć 10^-4), which is the expected ordering: the gain comes from having a structured model at all, and the retrieval stage recovers it cheaply rather than adding to it. Finding 3: identification separates the conditions sharply. Forced-choice identification of the participantās own voice reached 42.7% for aum-r at k=8k=8 (95% CI [37.1, 48.5][37.1,\,48.5], p=4.2Ć10ā11p=4.2Ć 10^-11 against 25% chance) and 35.4% for Full aum ([30.1, 41.1][30.1,\,41.1], p=5.3Ć10ā5p=5.3Ć 10^-5). Preference notes reached 14.9% and generic 6.9%, neither above chance (Table 9, Figure 7). That both user-model conditions sit above chance while both baselines sit below it is the cleanest separation in the study, and it is the result most directly relevant to the inversion argument of Section 3: notes distilled from unrelated past conversations carry topic, not person. Figure 5: Fidelity against injected context on a logarithmic axis. Eight retrieved fields reach the fidelity of the entire 32-field user model at 23% of its context. Error bars are 95% bootstrap intervals over the 96 (participant, task) cells. Figure 6: Fidelity against retrieval budget k, with the Full aum and preference-notes levels marked. Fidelity is still rising at the largest budget tested, so k=8k=8 is a trade rather than a saturation point. Table 9: Forced-choice identification. Chance is 25%; n=288n=288 presentations per condition (96 cells Ć 3 seeds). Intervals are Wilson; p is an exact binomial test against chance in the upper tail. Condition Hits % 95% CI p vs 25% aum-r, k=8k=8 (ours) 123 42.7 [37.1, 48.5] 4.2Ć10ā114.2Ć 10^-11 Full aum (all fields) 102 35.4 [30.1, 41.1] 5.3Ć10ā55.3Ć 10^-5 Preference notes 043 14.9 [11.3, 19.5] 1.00 Generic (prompt only) 020 06.9 [04.5, 10.5] 1.00 Figure 7: Forced-choice identification by the judge, with Wilson intervals and the 25% chance line. Both user-model conditions sit above chance; both baselines sit below it. 7.2 The budget curve Fidelity rose monotonically across the budgets tested: 2.86 at k=4k=4, 2.91 at k=8k=8, 2.98 at k=16k=16 (Figure 6). Neither adjacent step was individually significant after correction (k=16k=16 against k=8k=8: Ī=+0.06 =+0.06, p=0.74p=0.74; k=8k=8 against k=4k=4: Ī=+0.05 =+0.05, p=1p=1), so the curve is best read as a gradual improvement rather than a threshold. Two things follow. First, k=8k=8 is not a saturation point, and a system with a looser budget should use more fields. Second, and more usefully for the privacy argument, there is no evidence of degradation as further fields enter the payload: the concern that irrelevant fields would dilute a payload and hurt output quality is not borne out at these budgets, so the argument for a small k rests on cost and disclosure rather than on quality. 7.3 Style similarity Figure 8 shows the distribution of LUAR authorship cosine by condition, and Figure 9 the general-purpose semantic cosine for the same trials. The two behave differently in an instructive way. The authorship metric separates the conditions in the same order as fidelity, with a compressed range (0.674 to 0.705 across all ten conditions). The semantic metric separates them far less (0.593 to 0.620), which is what one expects given that every candidate for a given trial is an attempt at the same task: semantic similarity is dominated by topic, and topic is held constant by design. We report the semantic column only to make that contrast visible, and we would regard a paper that reported it as āstyle similarityā as having measured the wrong thing. Figure 8: Distribution of LUAR authorship-embedding cosine between each generated text and the participantās own reference, by condition. Figure 9: The same trials under a general-purpose semantic embedding. The compression relative to Figure 8 is the point: a semantic metric mostly measures that every candidate addresses the same task, which is the wrong invariance for a style claim. 7.4 Four controls return null Table 10: Planned contrasts, paired over the 96 (participant, task) cells. Ī is the mean paired difference; the interval is a 95% bootstrap interval over 10,000 resamples; p is Holm-corrected within metric, with Wilcoxon primary for fidelity and paired t primary for style. Metric Contrast Ī 95% CI dzd_z p fidelity aum-r k=8k=8 vs Preference notes +0.236+0.236 [+0.142+0.142, +0.330+0.330] +0.50+0.50 0.00010.0001 fidelity aum-r k=8k=8 vs Generic +0.267+0.267 [+0.177+0.177, +0.365+0.365] +0.57+0.57 0.00010.0001 fidelity Full aum vs Preference notes +0.219+0.219 [+0.115+0.115, +0.323+0.323] +0.42+0.42 0.00040.0004 fidelity aum-r k=8k=8 vs Full aum +0.017+0.017 [ā0.069-0.069, +0.108+0.108] +0.04+0.04 1.00001.0000 fidelity aum-r k=16k=16 vs aum-r k=8k=8 +0.063+0.063 [ā0.031-0.031, +0.156+0.156] +0.13+0.13 0.74360.7436 fidelity aum-r k=8k=8 vs aum-r k=4k=4 +0.049+0.049 [ā0.031-0.031, +0.125+0.125] +0.12+0.12 1.00001.0000 fidelity aum-r k=8k=8 vs Random k=8k=8 +0.028+0.028 [ā0.052-0.052, +0.108+0.108] +0.07+0.07 1.00001.0000 fidelity aum-r k=8k=8 vs no Ļā”(t)Ļ(t) ā0.035-0.035 [ā0.111-0.111, +0.045+0.045] ā0.09-0.09 0.98130.9813 fidelity aum-r k=8k=8 vs Dense top-k ā0.007-0.007 [ā0.083-0.083, +0.073+0.073] ā0.02-0.02 1.00001.0000 fidelity aum-r k=8k=8 vs Greedy ā0.035-0.035 [ā0.111-0.111, +0.042+0.042] ā0.09-0.09 1.00001.0000 style aum-r k=8k=8 vs Preference notes +0.013+0.013 [+0.006+0.006, +0.021+0.021] +0.36+0.36 0.00570.0057 style aum-r k=8k=8 vs Generic +0.024+0.024 [+0.015+0.015, +0.033+0.033] +0.53+0.53 0.00000.0000 style Full aum vs Preference notes +0.020+0.020 [+0.012+0.012, +0.029+0.029] +0.47+0.47 0.00010.0001 style aum-r k=8k=8 vs Full aum ā0.007-0.007 [ā0.014-0.014, +0.001+0.001] ā0.18-0.18 0.58890.5889 style aum-r k=8k=8 vs Random k=8k=8 +0.001+0.001 [ā0.005-0.005, +0.007+0.007] +0.04+0.04 1.00001.0000 style aum-r k=8k=8 vs no Ļā”(t)Ļ(t) ā0.006-0.006 [ā0.012-0.012, +0.001+0.001] ā0.17-0.17 0.60550.6055 style aum-r k=8k=8 vs Dense top-k ā0.001-0.001 [ā0.007-0.007, +0.005+0.005] ā0.03-0.03 1.00001.0000 style aum-r k=8k=8 vs Greedy ā0.002-0.002 [ā0.009-0.009, +0.005+0.005] ā0.06-0.06 1.00001.0000 All four controls returned null, on both metrics, and we take each in turn because each bounds the claim differently. The right k fields, or merely k fields? aum-r at k=8k=8 was not distinguishable from eight fields drawn uniformly at random from the same admissible pool (Ī=+0.028 =+0.028, p=1p=1). This is the most consequential null in the study. It says that once component selection has narrowed the pool to roughly seventeen fields, which eight of them are injected did not measurably matter. The gain in Findings 1 to 3 is therefore attributable to injecting structured, task-plausible fields about the person, not to ranking within that set. Does Ļā”(t)Ļ(t) contribute beyond retrieval? Removing component selection and retrieving over all thirty-two fields did not hurt; it was very slightly better and not significantly so (Ī=ā0.035 =-0.035, p=0.98p=0.98). Given the preceding null this is coherent rather than surprising: if ranking within the pool does not matter, restricting the pool cannot matter either, so long as the restriction does not exclude something essential. Section 7.5 shows that Ļā”(t)Ļ(t) nonetheless selects sensibly, which is a weaker but still useful property. Does the redundancy term earn its place? A relevance-only top-k was indistinguishable from the full objective (Ī=ā0.007 =-0.007, p=1p=1). Section 8 shows this is a property of the operating point rather than of the objective: at Ī»=0.15Ī»=0.15 and a pool of seventeen, the redundancy penalty rarely changes which eight fields win. Does the swarm earn its cost? It did not. aum-r did not beat forward greedy on generated style (Ī=ā0.035 =-0.035, p=1p=1), and it did not reach a higher value of its own objective. Table 11 gives the retrieval diagnostics: the swarm reached F=0.224F=0.224 using 1,736 objective evaluations, where greedy reached F=0.226F=0.226 using 108 and dense top-k reached F=0.225F=0.225 using one. Random reached F=0.183F=0.183, which confirms that the objective is meaningful even though optimising it harder did not help downstream. Figure 10 shows the quality and cost side by side. Table 11: Retrieval diagnostics at k=8k=8, averaged over all trials. Fā”(S)F(S) is the value of Equation 6 reached; evaluations counts calls to F; the pool is the size of poolā”(t)pool(t) after component selection. The swarm spent sixteen times greedyās budget to reach a marginally lower objective value. Retriever Fā”(S)F(S) Evaluations Seconds Pool Greedy, k=8k=8 0.2256 0,108.5 0.0014 16.9 Dense top-k, k=8k=8 0.2246 0,001.0 0.0001 16.9 aum-r (swarm), k=8k=8 0.2240 1,735.7 0.0196 16.9 Random, k=8k=8 0.1833 0,001.0 0.0001 16.9 aum-r, k=4k=4 0.2512 1,748.5 0.0166 16.9 aum-r, k=16k=16 0.2030 1,746.8 0.0213 20.0 aum-r, k=8k=8, no Ļā”(t)Ļ(t) 0.2376 1,791.6 0.0193 32.0 Figure 10: Retriever comparison at k=8k=8: objective value reached and objective evaluations spent. The swarm is both slightly worse and sixteen times more expensive than forward greedy at this scale. What the four nulls jointly establish. They localise the effect. Something about injecting a structured, task-plausible slice of a user model changes generated style substantially; nothing about which slice, or about how hard one searches for it, changes it further at this scale. That is a narrower claim than the one we set out to test, and it is the claim the data supports. Section 8 takes the optimisation question out of the language-model setting entirely and asks where, if anywhere, the search does start to matter. 7.5 Which shells each task type draws on Although component selection did not change downstream quality, the payloads it produced are interpretable, and inspecting them is a check that the pipeline is doing what the specification says. Figure 11 shows the share of retrieved payload drawn from each shell, broken down by task type, and Table 23 gives the same figures numerically. The pattern matches the mapping in Table 3 without having been forced to. Communication tasks drew 44.4% of their payload from Shell 3 and 42.3% from Shell 4. Self-presentation drew most heavily on the Nucleus (37.2%) and Shell 4 (41.2%), which is what one would expect of a task in which a person decides what to project. Planning and decision tasks drew 49.5% from Shell 3 and split the rest between Shell 1 and Shell 2. Relational-evaluative tasks, which involve judging another personās work, drew 24.7% from the Nucleus, the second-highest Nucleus share in the study, alongside 45.6% from Shell 3. Explanatory tasks drew 30.0% from Shell 2, which holds knowledge base and cognitive style, the highest Shell 2 share of any task type. Cross-shell fields appeared in every task type at between 7.6% and 14.8%. This is a weak result and we present it as one. It shows that the representation is legible and that retrieval over it behaves sensibly, not that legibility improves output. It matters mainly for the scrutability argument: a user inspecting why the assistant produced a particular draft can be shown a payload whose composition is defensible in ordinary language. Figure 11: Share of the retrieved payload drawn from each shell, by task type. Rows sum to 100%. The composition tracks Table 3 without having been constrained to. 7.6 Which tasks the effect holds for Table 12: Effect of aum-r at k=8k=8 over preference notes, by task. Ī is the mean paired difference in fidelity over the sixteen participants; āfavouringā is the share of participants for whom the difference is positive. p is an uncorrected Wilcoxon signed-rank test within task. ID Task Ī 95% CI Favouring p T6 Explain to a friend +0.375+0.375 [+0.042+0.042, +0.708+0.708] 56.3% 0.045 T2 Decline invitation +0.312+0.312 [+0.062+0.062, +0.604+0.604] 50.0% 0.061 T5 Trip planning +0.250+0.250 [+0.083+0.083, +0.396+0.396] 62.5% 0.024 T3 Public post +0.229+0.229 [+0.063+0.063, +0.396+0.396] 68.8% 0.018 T4 Feedback on draft +0.229+0.229 [0.000 +0.000, +0.479+0.479] 50.0% 0.116 T1 Deadline extension +0.021+0.021 [ā0.063-0.063, +0.104+0.104] 18.8% 0.783 All six tasks favoured aum-r in the mean (Table 12, Figure 12), but the sizes differ in a way worth naming. The largest effects are on tasks with the loosest genre conventions: explaining something to a friend outside the field (+0.375+0.375) and declining an invitation (+0.312+0.312). The smallest, and effectively zero, is the deadline-extension email (+0.021+0.021, favouring in only 18.8% of participants). That is the most conventionalised task in the battery: a deadline-extension email has a widely shared expected form, and a generic assistant already produces it. Where the genre supplies the structure, the user model has little left to contribute; where it does not, the model fills the gap. This is the task-level counterpart of the participant-level pattern in Section 7.8. Figure 12: Fidelity by task and condition. The deadline-extension task, the most conventionalised in the battery, shows the smallest spread across conditions. 7.7 Robustness Four supplementary analyses address the objections a reader is most likely to raise. All were specified after the main results and are reported as exploratory. The classifier stage works. Section 5 posits a routing stage, and an unevaluated first stage is a weak point in any pipeline. Over the full battery the classifier assigned the correct complexity label in 98.8% of trials (83 of 84, Wilson interval [93.6, 99.8][93.6,\,99.8]), with all twelve simple trials routed to bypass and 71 of 72 complex trials routed to the user model. Six-way task-type accuracy on complex trials was 90.3% (65 of 72, [81.3, 95.2][81.3,\,95.2]) against 16.7% chance. Table 13 gives per-type recall and Figure 13 the confusion matrix. The single systematic error is that explanatory requests are read as communication in a third of cases, which is intelligible: explaining a result to a friend is a communication act, and the two Ļā”(t)Ļ(t) sets share Shell 3. Table 13: Task classifier performance, pooled over three seeds. Recall is within gold task type on complex trials only. Gold type n Recall Dominant confusion planning-decision 12 100.0% n/a relational-evaluative 12 100.0% n/a communication 24 095.8% planning-decision (1) self-presentation 12 083.3% creative (2) explanatory 12 066.7% communication (4) Overall, six-way 090.3% chance 16.7% Simple vs complex 098.8% chance 50% Figure 13: Task-type confusion for complex requests, as row percentages. The one systematic error, explanatory read as communication, reflects a genuine overlap between the two categories. The effect is not a length artefact. A judge asked whether a text reads like a personās own writing might be rewarded largely by length agreement. It is: pooled across all trials, the absolute log ratio of candidate length to reference length correlates strongly and negatively with fidelity (Spearman Ļ=ā0.511Ļ=-0.511, p=3Ć10ā191p=3Ć 10^-191, n=2880n=2880). Matching the referenceās length is a large part of reading like the person, which is unsurprising and not itself a confound. The question is whether the treatment effect survives adjustment for it. It does. Regressing the paired fidelity difference (aum-r k=8k=8 minus preference notes) on the paired difference in absolute log length ratio leaves an intercept of +0.227+0.227 (95% CI [+0.127,+0.327][+0.127,\,+0.327], p=1.9Ć10ā5p=1.9Ć 10^-5) against a raw difference of +0.236+0.236, and the covariate slope is not significant (ā0.155-0.155, p=0.519p=0.519). In other words the two conditions did not differ appreciably in length agreement, and the effect is not carried by it. Table 14 gives the per-condition figures. The generic condition is the outlier: it produced the shortest outputs (96 words against a 142-word reference mean), the worst length agreement (0.007 on the absolute log ratio scale relative to the next condition) and the highest rate of degenerate outputs (7.6% of generic trials produced fewer than fifteen words, typically a clarifying question rather than an attempt at the task). Table 14: Output length by condition, against a reference mean of 141.6 words. āAgreementā is the mean absolute log ratio of candidate to reference length, where lower is closer. āStubā is the share of trials producing fewer than fifteen words. Condition Words 95% CI Agreement Stub Generic (prompt only) 096.3 [71.4, 124.9] 1.007 7.6% Preference notes 112.7 [85.6, 143.6] 0.920 5.9% Full aum 114.5 [88.5, 143.6] 0.844 3.5% aum-r, k=4k=4 112.2 [86.3, 140.9] 0.881 5.2% aum-r, k=8k=8 (ours) 114.0 [86.9, 145.0] 0.862 4.5% aum-r, k=16k=16 114.1 [86.6, 145.3] 0.840 2.4% Greedy, k=8k=8 109.7 [83.6, 139.3] 0.859 4.9% Dense top-k, k=8k=8 109.3 [83.8, 138.2] 0.860 4.2% Figure 14: Output length by condition against the participantsā own reference length. Every user-model condition moves output length towards the reference; the generic condition is furthest from it. The effect is broad, not driven by outliers. Twelve of sixteen participants and six of six tasks favoured aum-r in the mean. Of the 96 cells, 51.0% favoured aum-r, 33.3% were exact ties on the ordinal scale, and 15.6% favoured preference notes. Figure 15 gives a per-participant forest plot, and Table 15 the numbers. Two participants show small negative effects, the meticulous planner (ā0.111-0.111) and the reflective introvert (ā0.056-0.056), and neither interval excludes zero. Figure 15: Effect of aum-r at k=8k=8 over preference notes, by simulated participant, with 95% bootstrap intervals over that participantās six tasks. The dashed line is the pooled mean. The judge is usable but not sharp, and is not position-biased. Across the three seeds the fidelity judge achieved ICC(2,1) =0.57=0.57 over 960 targets, which by the conventional bands is moderate reliability (Shrout and Fleiss, 1979; Koo and Li, 2016). We report the intraclass correlation rather than a chance-corrected agreement coefficient because the ratings are ordinal and the three seeds are exchangeable rather than fixed coders, which is the condition under which the coefficient families diverge (Krippendorff, 2004; Artstein and Poesio, 2008). Exact agreement between seed pairs ranged from 42.0% to 43.2% and agreement within one scale point from 85.6% to 87.4%, with Spearman correlations of 0.55 to 0.60. The judge used the whole scale rather than collapsing to the middle: 13.8% of ratings were 1, 25.2% were 2, 25.8% were 3, 30.9% were 4 and 4.3% were 5. On identification, choices did not cluster significantly by option slot despite the per-trial shuffling (Ļ2=7.37Ļ^2=7.37, 3 d.f., p=0.061p=0.061), with slot shares of 22.9%, 29.2%, 27.4% and 20.5%. That p is close enough to the conventional threshold that we would not describe position bias as absent, only as not detected at this sample size. Figure 16 shows both diagnostics. Figure 16: Judge diagnostics. Left: use of the five-point scale across all trials. Right: identification choices by option slot, against the uniform 25% expectation, with Wilson intervals. 7.8 Personalisation buys most where the default voice is furthest away The per-participant breakdown suggested a pattern that we then tested directly. Fidelity in the generic condition is a direct measure of how well the un-personalised assistant already writes like a given participant: it is the score the default voice earns without any user model at all. If personalisation is doing what it claims, its benefit should be largest where that baseline is lowest. It is. Across the sixteen participants, generic-condition fidelity correlates negatively with the treatment effect (Spearman Ļ=ā0.61Ļ=-0.61, p=0.013p=0.013; Pearson r=ā0.60r=-0.60, p=0.013p=0.013), and the relationship holds at cell level with more power and a smaller coefficient (Ļ=ā0.27Ļ=-0.27, p=0.007p=0.007, n=96n=96). Splitting participants at the median generic fidelity, those the default serves worst gain +0.333+0.333 (95% CI [+0.181,+0.486][+0.181,\,+0.486]) and those it serves best gain +0.139+0.139 ([+0.035,+0.243][+0.035,\,+0.243]); the difference between the two groups is in the expected direction but does not itself reach significance (Mann-Whitney p=0.096p=0.096). Figure 17 plots the relationship. The extremes are interpretable. The blunt minimalist, whose lowercase fragments and absent sign-offs are about as far from a default assistant register as the battery contains, scores 1.78 under generic and gains +0.611+0.611, the largest effect in the study. The meticulous planner, whose numbered points and explicit dates are close to what an assistant produces unprompted, scores 2.94 under generic and gains nothing (ā0.111-0.111). The default voice already was that person. One caveat is important and we state it rather than burying it. The same correlation computed on the LUAR style metric rather than on judge fidelity is in the same direction but does not reach significance (Ļ=ā0.12Ļ=-0.12, p=0.242p=0.242). The pattern is therefore established in the judgeās ratings and not, on this sample, in the automatic measure. We report it because its design implication is substantial and because suppressing a result that did not replicate across both metrics would be worse than reporting it with its caveat attached. Figure 17: The treatment effect against how well the un-personalised assistant already matches each participant. Points are the sixteen simulated participants; the line is an ordinary least squares fit. Table 15: Effect of aum-r at k=8k=8 over preference notes, by simulated participant, ordered by effect size. āGenericā is that participantās mean fidelity in the prompt-only condition, which measures how well the default voice already matches them. Participant Generic Ī 95% CI Favouring blunt minimalist 1.78 +0.611+0.611 [+0.222+0.222, +1.111+1.111] 83.3% associative creative 2.06 +0.500+0.500 [+0.167+0.167, +0.889+0.889] 66.7% formal correct 2.28 +0.500+0.500 [ā0.111-0.111, +1.111+1.111] 66.7% bright energetic 3.11 +0.444+0.444 [+0.333+0.333, +0.556+0.556] 100.0% quirky metaphorical 2.22 +0.389+0.389 [ā0.056-0.056, +0.889+0.889] 50.0% pragmatic efficient 2.22 +0.333+0.333 [ā0.111-0.111, +0.611+0.611] 83.3% scattered fast 2.56 +0.333+0.333 [+0.111+0.111, +0.611+0.611] 66.7% warm over-explainer 2.78 +0.222+0.222 [ā0.056-0.056, +0.444+0.444] 66.7% competitive driver 2.72 +0.222+0.222 [ā0.056-0.056, +0.500+0.500] 50.0% stoic calm 3.33 +0.167+0.167 [0.000 +0.000, +0.389+0.389] 33.3% dry sceptic 2.83 +0.167+0.167 [0.000 +0.000, +0.389+0.389] 33.3% storytelling extrovert 2.11 +0.056+0.056 [ā0.111-0.111, +0.222+0.222] 33.3% nurturing relational 3.44 0.000 +0.000 [ā0.222-0.222, +0.278+0.278] 16.7% analytical flat 3.33 0.000 +0.000 [ā0.278-0.278, +0.333+0.333] 33.3% reflective introvert 2.61 ā0.056-0.056 [ā0.222-0.222, +0.111+0.111] 16.7% meticulous planner 2.94 ā0.111-0.111 [ā0.556-0.556, +0.278+0.278] 16.7% 8 Scaling Study of the Retriever 8.1 Separating two questions Section 7.4 reported that the swarm retriever neither improved generated style over forward greedy nor reached a higher value of its own objective, and that it spent roughly sixteen times as many objective evaluations doing so. That is a result about one operating point: a reduced 32-field instrument, a pool of about seventeen admissible fields after component selection, and k=8k=8. It is not a result about payload selection in general, and treating it as one would be as much of an error as the reverse. This section separates the two questions. It removes the language model entirely and studies the optimisation problem on its own, sweeping the instrument size n, the context budget k and the redundancy weight Ī». The question it answers is narrow and answerable: for which (n,k,Ī»)(n,k,Ī») does a population method reach a better value of Equation 6 than forward greedy, and at what cost. No API call is involved, so the whole sweep is free, deterministic from a seed, and can be re-run by a reader. 8.2 Instance model Field embeddings from real text are not isotropic Gaussian vectors. Fields belonging to the same shell talk about related things and therefore cluster, and that clustering is precisely what makes the redundancy term non-trivial. Each synthetic instance is generated with an explicit cluster structure. For n fields distributed over m shells in d dimensions, s _s ā¼Uniform(dā1),s=1,ā¦,m, (S^d-1), s=1,ā¦,m, (8) i _i =normaliseā”(Ļāsā”(i)+1āĻ2āi),iā¼ā”(,Ļ2āI), =normalise\! (Ļ\,c_s(i)+ 1-Ļ^2\; _i ), _i (0,Ļ^2I), (9) =normaliseā”(āsāwsās+Ļqāq), =normalise\! ( _s w_sc_s+ _q _q ), (10) where sā”(i)s(i) is the shell of field i, A is a random subset of shells of size two, and wsā¼Uniformā”(0.5,1.5)w_s (0.5,1.5). The query construction mimics a task that draws on two shells, which is what Table 3 specifies. The parameter Ļ controls how tightly a shell clusters; Ļ=0Ļ=0 recovers the isotropic case and makes the redundancy term nearly inert. We use Ļ=0.65Ļ=0.65, d=64d=64, m=maxā”(2,ān/6ā)m= (2, n/6 ) and 25 independent instances per cell. 8.3 Methods and budgets Six retrievers are compared, plus exhaustive search wherever (nk)ā¤60,000 nk⤠60,000. Dense top-k the relevance-only maximiser of Equation 5, one objective evaluation. Greedy forward greedy on the full objective. Random k fields drawn uniformly, the floor. AFSA (study budget) the swarm with exactly the population and iteration counts used in Section 6, p=12p=12 and T=8T=8, held fixed as n grows. This is what the simulation actually ran. AFSA (scaled budget) population and iterations grown with the search space: p=clipā”(ā2ālogā”(nk)ā,12,60)p=clip( 2 nk ,12,60) and T=clipā”(ā1.2ālogā”(nk)ā,8,40)T=clip( 1.2 nk ,8,40). The constants are set so that (n,k)=(32,8)(n,k)=(32,8) reproduces roughly the studyās own budget and everything larger receives proportionally more. AFSA (greedy warm start) the scaled-budget swarm with one member of the initial population replaced by the greedy solution. This is the obvious hybrid and the fairest test of whether a population method can add anything on top of greedy. The sweep covers nā16,32,64,128,256nā\16,32,64,128,256\, kā4,8,16,32kā\4,8,16,32\ with kā¤n/2k⤠n/2, and Ī»ā0,0.15,0.30,0.60Ī»ā\0,0.15,0.30,0.60\, giving 68 cells and 1,700 instances. Quality is reported as the relative gap to the best solution found for that instance by any method, which equals the exhaustive optimum wherever that is available. 8.4 Results Table 16: Relative gap to the best solution found, in percent, averaged over k and 25 instances per cell, at Ī»=0.15Ī»=0.15. Lower is better. Forward greedy is within 0.1% of the best solution at every instrument size; the swarm at the studyās fixed budget degrades steeply. n Greedy Dense top-k AFSA study AFSA scaled AFSA warm 16 0.10 0.65 00.44 00.04 0.00 32 0.08 0.46 05.66 00.34 0.00 64 0.01 0.35 20.94 00.57 0.01 128 0.07 0.47 33.51 05.46 0.05 256 0.03 0.53 43.23 12.59 0.01 Figure 18: Relative optimality gap against instrument size, one panel per budget k, at Ī»=0.15Ī»=0.15. Greedy and the warm-started swarm are indistinguishable from the best solution found at every scale; the fixed-budget swarm used in the simulation study degrades steeply. Forward greedy is very hard to beat. Across the entire sweep, greedy stayed within 0.10% of the best solution found (Table 16, Figure 18). Where exhaustive search was tractable, it returned the exact optimum in 77.7% of instances. It is not a straw man, and the fact that Equation 6 is not submodular in general (Nemhauser et al., 1978) does not appear to cost it much in practice on instances with this cluster structure. The studyās swarm budget, not the swarm, is what failed. AFSA at the fixed budget of Section 6 degraded from a 0.44% gap at n=16n=16 to 43.23% at n=256n=256, and found the exact optimum in only 46.3% of the tractable instances against greedyās 77.7%. It is a poor optimiser at any n beyond the smallest, and it was already worse than greedy at the n=32n=32 operating point the simulation used. This is the direct explanation of the null in Section 7.4: the swarm did not lose because population methods are unsuited to this problem, it lost because it was given a budget that does not grow with the search space. Growing the budget helps, up to a point. The scaled-budget swarm stayed within 0.6% up to n=64n=64 and found the exact optimum in 84.7% of tractable instances, exceeding greedyās 77.7%. Beyond that it degrades again (5.46% at n=128n=128, 12.59% at n=256n=256), because even a budget growing with logā”(nk) nk is a vanishing fraction of the search space. Warm-starting from greedy dominates. The warm-started swarm stayed within 0.05% at every scale tested and found the exact optimum in 96.3% of tractable instances. Against greedy head to head it won or tied in 100% of instances (16.0% strict wins, 84.0% ties, mean Ī=+0.001 =+0.001), which is what one expects of a method that starts from greedyās answer and keeps the better of the two. It costs roughly seven times greedyās evaluations (Table 17). Table 17: Objective evaluations at k=8k=8, Ī»=0.15Ī»=0.15, averaged over 25 instances. Dense top-k and random require a single evaluation. Exhaustive search is tractable only at n=16n=16. n Greedy AFSA study AFSA scaled AFSA warm Exhaustive 16 0,101 417 0,981 0,1,083 12,871 32 0,229 468 3,112 0,3,375 n/a 64 0,485 521 6,556 0,7,112 n/a 128 0,997 479 10,933 11,926 n/a 256 2,021 375 13,963 16,002 n/a Figure 19: Search cost in objective evaluations at k=8k=8, Ī»=0.15Ī»=0.15. The fixed-budget swarm spends a roughly constant amount regardless of instrument size, which is exactly why its solution quality collapses as n grows. Figure 20: Head-to-head strict win rate against forward greedy at Ī»=0.15Ī»=0.15, averaged over k. Strict wins are rare because ties are common: greedy and the warm-started swarm frequently return the same subset. The redundancy weight decides whether any of this matters. Figure 21 and Table 18 isolate Ī» at n=64n=64, k=8k=8. At Ī»=0Ī»=0 the objective is separable, dense top-k is exactly optimal by construction, and every search method is wasted effort. As Ī» rises the relevance-only solution degrades: a 0.32% gap at Ī»=0.15Ī»=0.15, 1.51% at Ī»=0.30Ī»=0.30 and 7.68% at Ī»=0.60Ī»=0.60, at which point greedy also begins to lose ground (1.73%). This locates the regime in which combinatorial search over a payload is worth performing at all: it is governed by how much a system penalises near-duplicate fields, and at the Ī»=0.15Ī»=0.15 we used, the penalty is mild enough that dense top-k is nearly optimal. That is the second half of the explanation for the null against dense top-k in Section 7.4. Table 18: Relative gap to the best solution found, in percent, against the redundancy weight Ī» at n=64n=64, k=8k=8. At Ī»=0Ī»=0 the objective is separable and sorting is optimal. Ī» Dense top-k Greedy AFSA scaled AFSA warm 0.00 0.00 0.00 1.00 0.00 0.15 0.32 0.00 1.11 0.00 0.30 1.51 0.35 0.87 0.04 0.60 7.68 1.73 1.76 0.03 Figure 21: Effect of the redundancy weight at n=64n=64, k=8k=8. At Ī»=0Ī»=0 the problem is a sort; as Ī» rises, relevance-only selection loses ground and combinatorial search starts to earn its cost. 8.5 What this means for deployment Three recommendations follow, and we state them as recommendations because they change what we would build. 1. Use forward greedy. At any instrument size we tested it is within 0.1% of the best solution found, at a cost of Oā”(kān)O(kn) evaluations. For an on-device retriever over sixty fields this is a few hundred dot products and is not worth improving on. 2. If a population method is used, warm-start it from greedy. A cold-started swarm is strictly worse than greedy at every scale beyond the smallest. A warm-started one never loses, reaches the exhaustive optimum in 96% of tractable instances, and costs about seven times greedy. Whether that is worth paying depends on whether the objective value is what one actually cares about, which Section 7.4 suggests it may not be. 3. Set Ī» deliberately, or drop the redundancy term. Below roughly Ī»=0.3Ī»=0.3 the redundancy penalty rarely changes which fields win, and a system that is not going to tune Ī» should use dense top-k and save the search entirely. Above it, the penalty matters and greedy is the right tool. The broader methodological point is that the null in Section 7.4 was not uninformative. Reading it required taking the optimisation question out of the language-model setting, where a downstream metric with a moderate effect size cannot resolve a 0.2% difference in objective value, and asking it where it could be answered. 9 Discussion 9.1 A context result, and why it is a privacy result The finding we would put first is not the effect size but the ratio. Eight retrieved fields, 211 tokens, matched the fidelity of injecting the entire 32-field user model, 915 tokens. Nothing in the study suggests that the remaining twenty-four fields were doing work that the eight did not. For efficiency this is a modest saving. For architecture it is the whole argument. Section 4 committed aum to local residence: the store sits on the userās device or in a user-controlled vault, never in a third-party log. That commitment is easy to state and hard to keep if the whole model must be transmitted on every complex request, because a model that is transmitted in full on every turn has, for practical purposes, been uploaded. A budgeted payload changes the character of the commitment. If eight fields suffice, disclosure per query is bounded by construction, the bound is measurable, and the fields that never leave are disproportionately the inner-shell ones, which are exactly the ones whose exposure carries the greatest cost. Figure 22: What crosses the device boundary. The full 32-field model, 915 tokens in the study, never leaves the device. A simple request leaves nothing. A complex request sends a payload of eight fields, 211 tokens, which the user can be shown before it is sent. The bound on disclosure per query is a measured quantity rather than a policy promise. In the vocabulary of contextual integrity (Nissenbaum, 2011), the design question is not whether the user model is secret but whether each flow out of it matches the norms of the context that produced it. A retrieval stage that returns a small task-conditioned slice is a mechanism for making flows contextual, and the size of the slice is the parameter that governs it. This is what we mean by privacy by architecture rather than privacy by policy: the former is a property one can measure in tokens, and we measured it. There is a second consequence for scrutability. Eight short natural-language strings can be shown to a user before they are sent; thirty-two cannot, and a JSON blob certainly cannot. The scrutable-personalisation literature has long argued that users should be able to inspect and correct the model a system holds of them (Kay and Kummerfeld, 2012; Czarkowski and Kay, 2002; Bakalov et al., 2010), and evidence that transparency and control change acceptance and behaviour is not new (Cramer et al., 2008; Harper et al., 2015). The obstacle has usually been that the model is too large or too statistical to show. A budgeted payload of readable sentences removes that obstacle for the per-request case: a user can be shown exactly what the assistant was told about them for this draft. 9.2 What the null results bound, and what they do not Four controls returned null, and Section 8 explained why. We think the joint reading is more interesting than any of them individually. The positive results establish that injecting a structured, task-plausible slice of a user model changes generated style substantially relative to both a generic baseline and the flat preference notes deployed systems store. The nulls establish that, at this scale, nothing about which slice or about how hard one searches for it adds anything further. Together they locate the effect in the representation rather than in the retrieval machinery. That is a narrower claim than the one the architecture invites, and it has a practical implication we would act on: a first deployment should use forward greedy over a well-specified schema, and should not spend engineering effort on the selection algorithm until the schema is larger and the redundancy penalty is doing real work. Two boundaries on the nulls deserve emphasis. First, they are nulls at an operating point with a pool of about seventeen fields, and Section 8 shows the optimisation landscape is genuinely flat there: greedy is within 0.1% of the exhaustive optimum, so there was nothing for a better search to recover. They are not evidence that selection is irrelevant at the full sixty-field specification, and we do not present them as such. Second, a null against random selection within a Ļā”(t)Ļ(t)-filtered pool is not a null against random selection from the whole model. The pool was already restricted to shells the task touches, so ārandomā here means random among plausible fields, which is a considerably stronger baseline than it sounds. 9.3 Personalisation is worth most to the people the default serves least The result with the clearest design consequence is the one in Section 7.8: the benefit of the user model was largest exactly for those participants whose voice the un-personalised assistant reproduced worst (Ļ=ā0.61Ļ=-0.61, p=0.013p=0.013 at participant level). The blunt minimalist gained +0.611+0.611; the meticulous planner, whose numbered and dated register a default assistant already produces, gained nothing. Read as a statistic this is a moderate correlation on sixteen points that did not replicate on the automatic style metric. Read as a design observation it says something sharper. A default assistant voice is not neutral. It is a particular register, and being well served by an un-personalised assistant means happening to write the way that register writes. Personalisation, on this reading, is not a uniform improvement distributed evenly across users; it is a correction whose size depends on how far a person sits from the modelās prior. This connects to a finding that motivates the whole project. Jakesch et al. (2023) showed that co-writing with an opinionated language model shifts usersā own expressed views. If a default assistant voice can move what a person says, then users whose register is furthest from the default face the largest pull towards it, and are also the users for whom a model of their own voice does the most work. Personalisation in that framing is not a convenience feature but a countermeasure, and the task-level pattern in Table 12 says the same thing at a different granularity: the effect was near zero on the deadline-extension email, the most conventionalised genre in the battery, where the assistantās default already is the correct answer. 9.4 Implications for the design of personalised assistants Four implications follow that we would apply to a system. 1. Store the person, retrieve the preference. The unit of storage should be the stable layer, and the situational preference should be derived at generation time. This is what makes an unseen task addressable and a stale preference re-interpretable rather than merely old. 2. Budget the payload, and show it. A small task-conditioned payload costs nothing measurable in quality, bounds disclosure per request, and is small enough to display. A system that shows the user the eight sentences it used has made scrutability concrete rather than aspirational. 3. Route simple requests around the model. The classifier stage routed factual lookups to bypass with 98.8% accuracy. This is cheap to implement and eliminates a class of disclosure that buys nothing, and we would regard omitting it as a design error rather than a missed optimisation. 4. Expect uneven benefit, and design for the tail. If the gain concentrates on users whose voice the default serves worst, then average-case evaluation will systematically understate the value of personalisation to the users who need it most. Reporting a mean effect across a user population is not sufficient; the distribution is the result. 9.5 Limitations Simulated participants. The most important limitation is the one stated first in Section 6.1. Every participant here is language-model-simulated. A judge model rating on behalf of a persona description has an easier task than a person recognising their own voice, and the absolute fidelity means sit near the middle of a five-point scale for every condition, including the best. The critical literature on synthetic participants (Bisbee et al., 2024; Wang et al., 2025) applies to this study in full, and no result here should be transferred to a claim about human users. The personas are not a sample. Sixteen personas written to be distinguishable are a friendlier population than any real one. The idiolect markers were authored, so the style differences the study measures are differences an author put there. In particular, conclusions about which users benefit should not be transferred to demographic groups, since the personas carry an authorās assumptions about how people with a given trait profile write. Judge reliability is moderate. ICC(2,1) of 0.57 across seeds is moderate rather than good (Koo and Li, 2016). Agreement within one scale point was 86%, so the judge is consistent about direction and imprecise about magnitude, which is adequate for paired contrasts and inadequate for absolute claims. Position bias was not detected but the test was close to threshold (p=0.061p=0.061). Acquisition is unspecified. aum specifies the fields a user representation should contain and not how they are populated. Self report is unreliable for inner-shell entries (Vazire, 2010; Connelly and Ones, 2010; Baumeister et al., 2007); passive observation raises the privacy concerns the architecture exists to avoid; and clinical assessment does not scale. We treat this as an open problem on which aum as a target representation is agnostic, but it is the largest gap between this paper and a deployable system. Update is unspecified. Fields carry a nominal update period Ļ, but no mechanism is given for detecting that a field has become stale or for revising it without re-running the whole instrument. Given that the motivating example in Section 1 is precisely a staleness failure, this is a conspicuous omission. Text only, and one language. The specification is text-based. Many personality cues are non-verbal: tone of voice, facial expression, pacing, response latency. The study also runs entirely in English, and the personality frameworks aum draws on were developed predominantly in specific populations, so cross-cultural validity of the inner tiers is untested (McCrae, 2002). Single generator and judge. One generator model and one judge model were used. Whether the effect sizes transfer across model families is unknown, and a judge from a single family may carry systematic preferences that a panel would average out. Lifespan and capacity. aum as specified assumes an adult user with an articulable identity. It does not represent young children, or persons with significant cognitive impairment, and we do not think it should be extended to them without a separate ethical analysis. 9.6 Future work The necessary next study is the human one this simulation substitutes for. Its shape is determined by what the simulation cannot answer: participants populate their own aum, write their own references for the same six tasks, and rate outputs from the same conditions blind, with the primary measure being self-rated fidelity and forced-choice identification of their own style. Section 10 states the conditions under which we think that study can be run. Three further directions follow from the results rather than from the gaps. First, acquisition: whether an aum can be populated incrementally from ordinary interaction without the passive observation the architecture is meant to avoid, perhaps by asking the user a small number of well-chosen questions at moments when the answer is cheap to give. Second, update: detecting staleness by watching for conflict between a stored field and new evidence, which is what the cross-shell internal-conflicts entry exists to support. Third, scale: whether the selection nulls of Section 7.4 persist at the full sixty-field specification, where Section 8 suggests the optimisation landscape is no longer flat. 10 Ethical Considerations A structured user model that records inner-shell content such as fears, difficult episodes and core values is among the most sensitive artefacts a person could hold. Building one creates risks that a preference list does not, and we do not think those risks are adequately answered by noting that the model is opt-in. Three binding constraints. We bind aum to three. Local residence: the store sits on the userās device or in a user-controlled vault, never in a third-party log, and only the retrieved payload leaves it. Section 7 makes this quantitative rather than aspirational: a payload of eight fields reaches the fidelity of the whole model, so budgeted retrieval bounds what any single query can disclose at no measured cost in quality. User authorship: every field is inspectable, editable and deletable, and eight short strings are few enough to display before they are sent. Purpose restriction: aum is intended for task-style personalisation under the userās direction, not for profiling, advertising, surveillance, or persuasion against the userās interest. The misuse the architecture cannot prevent. A high-resolution model of a person is valuable to anyone who wants to influence that person, and an operator who ignores the local-residence constraint gains a profiling asset of a kind that does not currently exist at scale. Our own results sharpen this rather than softening it: Section 7.8 found the effect largest for participants whose voice the default serves worst, and those are also the people for whom an accurate model would be most identifying. Users of LLM-based conversational agents already disclose a great deal and reason about the risks only partially (Zhang et al., 2024b), and language models can leak personal information present in training data (Huang et al., 2022). We do not think this argues against specifying the representation. Opaque, implicit user models already sit inside large-scale systems with weaker user control, and an explicit schema at least makes the contents auditable and contestable. But mitigation has to be architectural, in where the data lives, as well as procedural, in who may query it and for what, and a paper that proposes the representation without saying so would be incomplete. Human participants. No human participants were involved in this work and no human-subjects data was collected. Every participant in Sections 6 and 7 is language-model-simulated and every persona is fictional and declared in code (Appendix C). The human study described in Section 9.6 would require informed consent, the right to withdraw with deletion of all collected aum fields, and institutional ethics approval, since participants would disclose identity-level content about themselves. Inner-shell fields should be optional by default and skippable without penalty, and participants should be able to review their populated instrument before any of it is used. A concern specific to simulation. Personas written by an author carry that authorās assumptions about how people of a given trait profile write. Ours are deliberately varied but are not a sample of any population. Conclusions about which users benefit from personalisation should not be transferred to demographic groups on the basis of this study, and we have tried to phrase Section 7.8 so that it cannot be read that way. 11 Conclusion Personalisation of language-model assistants currently stores what a user has done. We argued that it should store the person from whom those doings come, and that the two are not interchangeable because personality is comparatively stable while preferences are situational. We named the phenomenon that makes the difference visible, personality seepage, in which a prompt carries a fingerprint the assistant mirrors without being able to read. We specified the Atomic User Model, a five-tier structured and human-readable representation whose metaphor encodes differential stability and differential observability, and a personality-aware retrieval pipeline that treats it as an index rather than a prompt prefix. In a simulation study with sixteen language-model-simulated participants, six style-sensitive tasks and three seeds, retrieving eight fields matched the style fidelity of injecting the whole user model at 23% of the context, improved on the flat preference notes deployed systems store by 0.24 points on a five-point scale, and raised forced-choice identification of the participantās own voice from 14.9% to 42.7% against 25% chance. Four controls returned null, and a synthetic scaling study of the retriever explained why: at the operating point used, forward greedy is already within 0.1% of the exhaustive optimum, so there was nothing for a population method to recover. The effect lives in the representation, not in the search over it. The result we would carry forward is neither the effect size nor the null. It is that a small, readable, task-conditioned payload is enough, because that is what makes a user model something a person can keep on their own device and read before it is sent. And it is that the benefit was largest for the participants whose voice the default assistant served worst, which suggests that personalisation is least valuable to the users who resemble the modelās prior and most valuable to everyone else. CRediT authorship contribution statement B. Sankar: Conceptualization, Methodology, Software, Formal analysis, Investigation, Writing, original draft, Writing, review and editing, Supervision, Project administration. Deepthika S: Methodology, Software, Validation, Investigation, Data curation, Writing, review and editing. Pawni Yadav: Methodology, Software, Validation, Investigation, Visualization, Writing, review and editing. Amogh A S: Software, Validation, Data curation, Visualization, Writing, review and editing. Declaration of competing interest The authors declare that they have no known competing financial interests or personal relationships that could have appeared to influence the work reported in this paper. Declaration of generative AI in the writing process The studies reported in Sections 6 to 8 use large language models as the object of study and as simulated participants; this use is described in full in those sections. In preparing this manuscript the authors additionally used a large language model to assist with drafting and editing of prose. The authors reviewed and edited all content and take full responsibility for the content of the publication. Data and code availability The simulation code, the persona declarations, every prompt, and the run manifest and ledger, all per-trial records, the analysis scripts, and the scaling benchmark are available at https://github.com/REPOSITORY-URL-HERE. Each number reported in Sections 7 and 8 is reproducible from the released artefacts and a seed. Funding declaration This research did not receive any specific grant from funding agencies in the public, commercial, or not-for-profit sectors. References Agrawal et al. (2009) R. Agrawal, S. Gollapudi, A. Halverson, and S. Ieong Diversifying search results. In Proceedings of the Second ACM International Conference on Web Search and Data Mining, p. 5ā14. External Links: Document Cited by: §2.1, §5.2. Alhafni et al. (2024) B. Alhafni, V. Kulkarni, D. Kumar, and V. Raheja Personalized text generation with fine-grained linguistic control. In Proceedings of the 1st Workshop on Personalization of Generative AI Systems (PERSONALIZE 2024), p. 88ā101. External Links: Document Cited by: §2.9. Altman and Taylor (1973) I. Altman and D. A. Taylor Social penetration: the development of interpersonal relationships. Holt, Rinehart and Winston, New York. Cited by: item Differential observability.. Anderson et al. (2004) J. R. Anderson, D. Bothell, M. D. Byrne, S. Douglass, C. Lebiere, and Y. Qin An integrated theory of the mind. Psychological Review 111 (4), p. 1036ā1060. External Links: Document Cited by: §2.10. Andrews and Bishop (2019) N. Andrews and M. Bishop Learning invariant representations of social media users. In Proceedings of the 2019 Conference on Empirical Methods in Natural Language Processing and the 9th International Joint Conference on Natural Language Processing (EMNLP-IJCNLP), p. 1684ā1695. External Links: Document Cited by: §2.9. Argyle et al. (2023) L. P. Argyle, E. C. Busby, N. Fulda, J. R. Gubler, C. Rytting, and D. Wingate Out of one, many: using language models to simulate human samples. Political Analysis 31 (3), p. 337ā351. External Links: Document Cited by: §2.9, §6.1. Artstein and Poesio (2008) R. Artstein and M. Poesio Inter-coder agreement for computational linguistics. Computational Linguistics 34 (4), p. 555ā596. External Links: Document Cited by: §7.7. Azucar et al. (2018) D. Azucar, D. Marengo, and M. Settanni Predicting the Big 5 personality traits from digital footprints on social media: a meta-analysis. Personality and Individual Differences 124, p. 150ā159. External Links: Document Cited by: §2.4. Bakalov et al. (2010) F. Bakalov, B. Kƶnig-Ries, A. Nauerz, and M. Welsch IntrospectiveViews: an interface for scrutinizing semantic user models. In User Modeling, Adaptation, and Personalization, Lecture Notes in Computer Science, p. 219ā230. External Links: Document Cited by: §2.6, §4.5, §9.1. Baumeister et al. (2007) R. F. Baumeister, K. D. Vohs, and D. C. Funder Psychology as the science of self-reports and finger movements: whatever happened to actual behavior?. Perspectives on Psychological Science 2 (4), p. 396ā403. External Links: Document Cited by: §2.4, §9.5. Bennett et al. (2012) P. N. Bennett, R. W. White, W. Chu, S. T. Dumais, P. Bailey, F. Borisyuk, and X. Cui Modeling the impact of short- and long-term behavior on search personalization. In Proceedings of the 35th International ACM SIGIR Conference on Research and Development in Information Retrieval, SIGIR ā12, New York, NY, USA, p. 185ā194. External Links: Document Cited by: §1, §2.1. Bisbee et al. (2024) J. Bisbee, J. D. Clinton, C. Dorff, B. Kenkel, and J. M. Larson Synthetic replacements for human survey data? the perils of large language models. Political Analysis 32 (4), p. 401ā416. External Links: Document Cited by: §2.9, §6.1, §9.5. Bowlby (1969) J. Bowlby Attachment. Attachment and Loss, Vol. 1, Basic Books, New York. Cited by: §4.3. Boyd and Pennebaker (2017) R. L. Boyd and J. W. Pennebaker Language-based personality: a new approach to personality in a digital world. Current Opinion in Behavioral Sciences 18, p. 63ā68. External Links: Document Cited by: §2.4. Brusilovsky and MillĆ”n (2007) P. Brusilovsky and E. MillĆ”n User models for adaptive hypermedia and adaptive educational systems. In The Adaptive Web: Methods and Strategies of Web Personalization, P. Brusilovsky, A. Kobsa, and W. Nejdl (Eds.), Lecture Notes in Computer Science, Vol. 4321, p. 3ā53. External Links: Document Cited by: §1, §2.1. Carbonell and Goldstein (1998) J. Carbonell and J. Goldstein The use of MMR, diversity-based reranking for reordering documents and producing summaries. In Proceedings of the 21st Annual International ACM SIGIR Conference on Research and Development in Information Retrieval, p. 335ā336. External Links: Document Cited by: §2.1, §5.2. Carpenter and Greene (2015) A. Carpenter and K. Greene Social penetration theory. In The International Encyclopedia of Interpersonal Communication, C. R. Berger and M. E. Roloff (Eds.), p. 1ā4. External Links: Document Cited by: item Differential observability.. Chen et al. (2019) M. Chen, A. T. Suresh, R. Mathews, A. Wong, C. Allauzen, F. Beaufays, and M. Riley Federated learning of n-gram language models. In Proceedings of the 23rd Conference on Computational Natural Language Learning (CoNLL), p. 121ā130. External Links: Document Cited by: §2.6. Chhetri et al. (2026) G. Chhetri, S. Das, and T. I. Chowdhury SPARK: search personalization via agent-driven retrieval and knowledge-sharing. In Proceedings of the Nineteenth ACM International Conference on Web Search and Data Mining, WSDM ā26, New York, NY, USA, p. 84ā92. External Links: Document Cited by: §2.2. Chiang and Lee (2023) C. Chiang and H. Lee Can large language models be an alternative to human evaluations?. In Proceedings of the 61st Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers), p. 15607ā15631. External Links: Document Cited by: §2.9. Cho et al. (2022) I. Cho, D. Wang, R. Takahashi, and H. Saito A personalized dialogue generator with implicit user persona detection. In Proceedings of the 29th International Conference on Computational Linguistics, Gyeongju, Republic of Korea, p. 367ā377. External Links: Link Cited by: §2.4. Clarke et al. (2008) C. L. A. Clarke, M. Kolla, G. V. Cormack, O. Vechtomova, A. Ashkan, S. Büttcher, and I. MacKinnon Novelty and diversity in information retrieval evaluation. In Proceedings of the 31st Annual International ACM SIGIR Conference on Research and Development in Information Retrieval, p. 659ā666. External Links: Document Cited by: §2.1, §5.2. Connelly and Ones (2010) B. S. Connelly and D. S. Ones An other perspective on personality: meta-analytic integration of observersā accuracy and predictive validity. Psychological Bulletin 136 (6), p. 1092ā1122. External Links: Document Cited by: §2.4, §6.3, §9.5. Cramer et al. (2008) H. Cramer, V. Evers, S. Ramlal, M. van Someren, L. Rutledge, N. Stash, L. Aroyo, and B. Wielinga The effects of transparency on trust in and acceptance of a content-based art recommender. User Modeling and User-Adapted Interaction 18 (5), p. 455ā496. External Links: Document Cited by: §2.6, §9.1. Czarkowski and Kay (2002) M. Czarkowski and J. Kay A scrutable adaptive hypertext. In Adaptive Hypermedia and Adaptive Web-Based Systems, Lecture Notes in Computer Science, p. 384ā387. External Links: Document Cited by: §2.6, §4.5, §9.1. Dou et al. (2007) Z. Dou, R. Song, and J. Wen A large-scale evaluation and analysis of personalized search strategies. In Proceedings of the 16th International Conference on World Wide Web, W ā07, New York, NY, USA, p. 581ā590. External Links: Document Cited by: §1, §2.1. Epstein et al. (2015) D. A. Epstein, A. Ping, J. Fogarty, and S. A. Munson A lived informatics model of personal informatics. In Proceedings of the 2015 ACM International Joint Conference on Pervasive and Ubiquitous Computing, p. 731ā742. External Links: Document Cited by: §2.5. Erikson (1968) E. H. Erikson Identity: youth and crisis. W. W. Norton, New York. External Links: ISBN 9780393311440 Cited by: §4.3. Gero et al. (2020) K. I. Gero, Z. Ashktorab, C. Dugan, Q. Pan, J. Johnson, W. Geyer, M. Ruiz, S. Miller, D. R. Millen, M. Campbell, S. Kumaravel, and W. Zhang Mental models of AI agents in a cooperative game setting. In Proceedings of the 2020 CHI Conference on Human Factors in Computing Systems, p. 1ā12. External Links: Document Cited by: §2.6. Goffman (1959) E. Goffman The presentation of self in everyday life. Doubleday, Garden City, New York. Cited by: item Persona, §4.3. Goldberg et al. (2006) L. R. Goldberg, J. A. Johnson, H. W. Eber, R. Hogan, M. C. Ashton, C. R. Cloninger, and H. G. Gough The international personality item pool and the future of public-domain personality measures. Journal of Research in Personality 40 (1), p. 84ā96. External Links: Document Cited by: §2.4. Gosling et al. (2003) S. D. Gosling, P. J. Rentfrow, and W. B. Swann A very brief measure of the Big-Five personality domains. Journal of Research in Personality 37 (6), p. 504ā528. External Links: Document Cited by: §2.4. Goyal and Tawde (2022) M. Goyal and P. Tawde A research attempt to predict and model personalities through usersā social media details. In 2022 IEEE Bombay Section Signature Conference (IBSSC), p. 1ā6. External Links: Document Cited by: §2.4. Harper et al. (2015) F. M. Harper, F. Xu, H. Kaur, K. Condiff, S. Chang, and L. Terveen Putting users in control of their recommendations. In Proceedings of the 9th ACM Conference on Recommender Systems, p. 3ā10. External Links: Document Cited by: §2.6, §9.1. Huang et al. (2025) F. Huang, Y. Bei, Z. Yang, J. Jiang, H. Chen, Q. Shen, S. Wang, F. Karray, and P. S. Yu Large language model simulator for cold-start recommendation. In Proceedings of the Eighteenth ACM International Conference on Web Search and Data Mining, WSDM ā25, New York, NY, USA, p. 261ā270. External Links: Document Cited by: §2.2. Huang et al. (2022) J. Huang, H. Shao, and K. C. Chang Are large pre-trained language models leaking your personal information?. In Findings of the Association for Computational Linguistics: EMNLP 2022, p. 2038ā2047. External Links: Document Cited by: §10, §2.6. Jakesch et al. (2023) M. Jakesch, A. Bhat, D. Buschek, L. Zalmanson, and M. Naaman Co-writing with opinionated language models affects usersā views. In Proceedings of the 2023 CHI Conference on Human Factors in Computing Systems, p. 1ā15. External Links: Document Cited by: §2.7, §9.3. Jeromela (2022) J. Jeromela Scrutability of intelligent personal assistants. In Proceedings of the 30th ACM Conference on User Modeling, Adaptation and Personalization, p. 335ā340. External Links: Document Cited by: §2.6. Ji et al. (2023) Y. Ji, W. Wu, H. Zheng, Y. Hu, X. Chen, and L. He Is ChatGPT a good personality recognizer? A preliminary study. External Links: 2307.03952, Document, Link Cited by: §2.4, §4.5. Jiang et al. (2023) H. Jiang, Q. Wu, C. Lin, Y. Yang, and L. Qiu LLMLingua: compressing prompts for accelerated inference of large language models. In Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing, p. 13358ā13376. External Links: Document Cited by: §2.3. Jiang et al. (2024) H. Jiang, Q. Wu, X. Luo, D. Li, C. Lin, Y. Yang, and L. Qiu LongLLMLingua: accelerating and enhancing LLMs in long context scenarios via prompt compression. In Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers), p. 1658ā1677. External Links: Document Cited by: §2.3. Kang et al. (2023) W. Kang, J. Ni, N. Mehta, M. Sathiamoorthy, L. Hong, E. Chi, and D. Z. Cheng Do LLMs understand user preferences? evaluating LLMs on user rating prediction. External Links: 2305.06474, Document, Link Cited by: §2.2, §4.5. Kay and Kummerfeld (2012) J. Kay and B. Kummerfeld Creating personalized systems that people can scrutinize and control: Drivers, principles and experience. ACM Transactions on Interactive Intelligent Systems 2 (4), p. 1ā42. External Links: Document Cited by: §2.6, item 1, §4.5, §9.1. Kobsa (2001) A. Kobsa Generic user modeling systems. User Modeling and User-Adapted Interaction 11 (1ā2), p. 49ā63. External Links: Document Cited by: §1, §2.1. Koo and Li (2016) T. K. Koo and M. Y. Li A guideline of selecting and reporting intraclass correlation coefficients for reliability research. Journal of Chiropractic Medicine 15 (2), p. 155ā163. External Links: Document Cited by: §7.7, §9.5. Kosinski et al. (2013) M. Kosinski, D. Stillwell, and T. Graepel Private traits and attributes are predictable from digital records of human behavior. Proceedings of the National Academy of Sciences 110 (15), p. 5802ā5805. External Links: Document Cited by: §2.4. Krippendorff (2004) K. Krippendorff Reliability in content analysis: some common misconceptions and recommendations. Human Communication Research 30 (3), p. 411ā433. External Links: Document Cited by: §7.7. Kumar et al. (2024) I. Kumar, S. Viswanathan, S. Yerra, A. Salemi, R. A. Rossi, F. Dernoncourt, H. Deilamsalehy, X. Chen, R. Zhang, S. Agarwal, N. Lipka, C. V. Nguyen, T. H. Nguyen, and H. Zamani LongLaMP: a benchmark for personalized long-form text generation. External Links: 2407.11016, Document, Link Cited by: §2.2. Laird (2012) J. E. Laird The Soar cognitive architecture. MIT Press, Cambridge, MA. External Links: ISBN 9780262122962 Cited by: §2.10. Lee et al. (2024) M. Lee, K. I. Gero, J. J. Y. Chung, S. Buckingham Shum, V. Raheja, H. Shen, S. Venugopalan, T. Wambsganss, D. Zhou, E. A. Alghamdi, T. August, A. Bhat, M. Z. Choksi, S. Dutta, J. L. C. Guo, M. N. Hoque, Y. Kim, S. Knight, S. P. Neshaei, A. Shibani, D. Shrivastava, L. Shroff, A. Sergeyuk, J. Stark, S. Sterman, S. Wang, A. Bosselut, D. Buschek, J. C. Chang, S. Chen, M. Kreminski, J. Park, R. Pea, E. H. R. Rho, Z. Shen, and P. Siangliulue A design space for intelligent and interactive writing assistants. In Proceedings of the CHI Conference on Human Factors in Computing Systems, p. 1ā35. External Links: Document Cited by: §2.7. Lee et al. (2022) M. Lee, P. Liang, and Q. Yang CoAuthor: designing a human-AI collaborative writing dataset for exploring language model capabilities. In Proceedings of the 2022 CHI Conference on Human Factors in Computing Systems, p. 1ā19. External Links: Document Cited by: §2.7. Li et al. (2010) I. Li, A. Dey, and J. Forlizzi A stage-based model of personal informatics systems. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, p. 557ā566. External Links: Document Cited by: §2.5. Li et al. (2002) X. L. Li, Z. J. Shao, and J. X. Qian An optimizing method based on autonomous animats: fish-swarm algorithm. Systems Engineering - Theory & Practice 22 (11), p. 32ā38. Note: No DOI is registered for this record; verified on the publisherās article page Cited by: §2.8, §5.3. Li et al. (2023) Y. Li, B. Dong, F. Guerin, and C. Lin Compressing context to enhance inference efficiency of large language models. In Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing, p. 6342ā6353. External Links: Document Cited by: §2.3. Liao et al. (2026) Y. Liao, Y. Deng, T. Jiang, and J. Ren Personalizing large language models with user profile memory. In Proceedings of the 32nd ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.2, KDD ā26, New York, NY, USA, p. 3051ā3061. External Links: Document Cited by: §1, §2.2. Lin et al. (2024) Y. Lin, L. Chen, A. Ali, C. Nugent, I. Cleland, R. Li, J. Ding, and H. Ning Human digital twin: a survey. Journal of Cloud Computing 13 (1), p. 131. External Links: Document Cited by: §2.5. Liu et al. (2023) Y. Liu, D. Iter, Y. Xu, S. Wang, R. Xu, and C. Zhu G-Eval: NLG evaluation using GPT-4 with better human alignment. In Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing, p. 2511ā2522. External Links: Document Cited by: §2.9. Luger and Sellen (2016) E. Luger and A. Sellen āLike having a really bad PAā: the gulf between user expectation and experience of conversational agents. In Proceedings of the 2016 CHI Conference on Human Factors in Computing Systems, p. 5286ā5297. External Links: Document Cited by: §2.6. Mahmood et al. (2025) A. Mahmood, J. Wang, B. Yao, D. Wang, and C. Huang User interaction patterns and breakdowns in conversing with LLM-powered voice assistants. International Journal of Human-Computer Studies 195, p. 103406. External Links: Document Cited by: §2.6. Man and Nguyen (2024) H. Man and T. H. Nguyen Counterfactual augmentation for robust authorship representation learning. In Proceedings of the 47th International ACM SIGIR Conference on Research and Development in Information Retrieval, p. 2347ā2351. External Links: Document Cited by: §2.9. McCrae and Costa (1989) R. R. McCrae and P. T. Costa Reinterpreting the Myers-Briggs Type Indicator from the perspective of the five-factor model of personality. Journal of Personality 57 (1), p. 17ā40. External Links: Document Cited by: §2.4. McCrae and John (1992) R. R. McCrae and O. P. John An introduction to the five-factor model and its applications. Journal of Personality 60 (2), p. 175ā215. External Links: Document Cited by: §2.4, §4.3. McCrae (2002) R. R. McCrae Cross-cultural research on the five-factor model of personality. Online Readings in Psychology and Culture 4 (4). External Links: Document Cited by: §2.4, §9.5. Mir et al. (2019) R. Mir, B. Felbo, N. Obradovich, and I. Rahwan Evaluating style transfer for text. In Proceedings of the 2019 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, p. 495ā504. External Links: Document Cited by: §2.9. Nemhauser et al. (1978) G. L. Nemhauser, L. A. Wolsey, and M. L. Fisher An analysis of approximations for maximizing submodular set functions i. Mathematical Programming 14 (1), p. 265ā294. External Links: Document Cited by: §2.8, §5.2, §8.4. Neshat et al. (2014) M. Neshat, G. Sepidnam, M. Sargolzaei, and A. N. Toosi Artificial fish swarm algorithm: a survey of the state-of-the-art, hybridization, combinatorial and indicative applications. Artificial Intelligence Review 42 (4), p. 965ā997. Note: Published online 2012; print issue 2014 External Links: Document Cited by: §2.8. Ngo et al. (2020) T. Ngo, J. Kunkel, and J. Ziegler Exploring mental models for transparent and controllable recommender systems: a qualitative study. In Proceedings of the 28th ACM Conference on User Modeling, Adaptation and Personalization, p. 183ā191. External Links: Document Cited by: §2.6. Nguyen et al. (2020) B. H. Nguyen, B. Xue, and M. Zhang A survey on swarm intelligence approaches to feature selection in data mining. Swarm and Evolutionary Computation 54, p. 100663. External Links: Document Cited by: §2.8. Nissenbaum (2011) H. Nissenbaum A contextual approach to privacy online. Daedalus 140 (4), p. 32ā48. External Links: Document Cited by: §2.6, §4.5, §9.1. Ostheimer et al. (2023) P. Ostheimer, M. K. Nagda, M. Kloft, and S. Fellenz A call for standardization and validation of text style transfer evaluation. In Findings of the Association for Computational Linguistics: ACL 2023, p. 10791ā10815. External Links: Document Cited by: §2.9. Packer et al. (2023) C. Packer, S. Wooders, K. Lin, V. Fang, S. G. Patil, I. Stoica, and J. E. Gonzalez MemGPT: towards LLMs as operating systems. External Links: 2310.08560, Document, Link Cited by: §1, §2.2. Panickssery et al. (2024) A. Panickssery, S. Bowman, and S. Feng LLM evaluators recognize and favor their own generations. In Advances in Neural Information Processing Systems 37, Vol. 37, p. 68772ā68802. External Links: Document Cited by: §2.9, §6.7. Park et al. (2015) G. Park, H. A. Schwartz, J. C. Eichstaedt, M. L. Kern, M. Kosinski, D. J. Stillwell, L. H. Ungar, and M. E. P. Seligman Automatic personality assessment through social media language. Journal of Personality and Social Psychology 108 (6), p. 934ā952. External Links: Document Cited by: §2.4. Park et al. (2023) J. S. Park, J. OāBrien, C. J. Cai, M. R. Morris, P. Liang, and M. S. Bernstein Generative agents: interactive simulacra of human behavior. In Proceedings of the 36th Annual ACM Symposium on User Interface Software and Technology, UIST ā23, New York, NY, USA, p. 1ā22. External Links: Document Cited by: §2.2. Park et al. (2024) J. S. Park, C. Q. Zou, J. Kamphorst, N. Egan, A. Shaw, B. M. Hill, C. Cai, M. R. Morris, P. Liang, R. Willer, and M. S. Bernstein LLM agents grounded in self-reports enable general-purpose simulation of individuals. External Links: 2411.10109, Document, Link Cited by: §2.5, §2.9, §6.1. Patel et al. (2023) A. Patel, D. Rao, A. Kothary, K. McKeown, and C. Callison-Burch Learning interpretable style embeddings via prompting LLMs. In Findings of the Association for Computational Linguistics: EMNLP 2023, p. 15270ā15290. External Links: Document Cited by: §2.9. Pennebaker and King (1999) J. W. Pennebaker and L. A. King Linguistic styles: language use as an individual difference. Journal of Personality and Social Psychology 77 (6), p. 1296ā1312. External Links: Document Cited by: §2.4, §3.2. Pittenger (2005) D. J. Pittenger Cautionary comments regarding the Myers-Briggs Type Indicator. Consulting Psychology Journal: Practice and Research 57 (3), p. 210ā221. External Links: Document Cited by: §2.4, §4.3. Pourpanah et al. (2023) F. Pourpanah, R. Wang, C. P. Lim, X. Wang, and D. Yazdani A review of artificial fish swarm algorithms: recent advances and applications. Artificial Intelligence Review 56 (3), p. 1867ā1903. Note: Published online 2022; print issue 2023 External Links: Document Cited by: §2.8. Rao et al. (2023) H. Rao, C. Leung, and C. Miao Can ChatGPT assess human personalities? A general evaluation framework. In Findings of the Association for Computational Linguistics: EMNLP 2023, p. 1184ā1194. External Links: Link Cited by: §2.4. Rapp and Cena (2016) A. Rapp and F. Cena Personal informatics for everyday life: How users without prior self-tracking experience engage with personal data. International Journal of Human-Computer Studies 94, p. 1ā17. External Links: Document Cited by: §2.5. Reza et al. (2025) M. Reza, J. Thomas-Mitchell, P. Dushniku, N. Laundry, J. J. Williams, and A. Kuzminykh Co-writing with AI, on human terms: Aligning research with user demands across the writing process. Proceedings of the ACM on Human-Computer Interaction 9 (7), p. 1ā37. External Links: Document Cited by: §2.7. Rivera-Soto et al. (2021) R. A. Rivera-Soto, O. E. Miano, J. Ordonez, B. Y. Chen, A. Khan, M. Bishop, and N. Andrews Learning universal authorship representations. In Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing, Online and Punta Cana, Dominican Republic, p. 913ā919. External Links: Document Cited by: §2.9, §6.7. Roberts and DelVecchio (2000) B. W. Roberts and W. F. DelVecchio The rank-order consistency of personality traits from childhood to old age: a quantitative review of longitudinal studies. Psychological Bulletin 126 (1), p. 3ā25. External Links: Document Cited by: §1, item Personality. Roberts et al. (2006) B. W. Roberts, K. E. Walton, and W. Viechtbauer Patterns of mean-level change in personality traits across the life course: a meta-analysis of longitudinal studies. Psychological Bulletin 132 (1), p. 1ā25. External Links: Document Cited by: §1, item Personality. Salemi et al. (2024) A. Salemi, S. Mysore, M. Bendersky, and H. Zamani LaMP: when large language models meet personalization. In Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers), p. 7370ā7392. External Links: Link Cited by: §2.2. Schwartz et al. (2013) H. A. Schwartz, J. C. Eichstaedt, M. L. Kern, L. Dziurzynski, S. M. Ramones, M. Agrawal, A. Shah, M. Kosinski, D. Stillwell, M. E. P. Seligman, and L. H. Ungar Personality, gender, and age in the language of social media: the open-vocabulary approach. PLoS ONE 8 (9), p. e73791. External Links: Document Cited by: §2.4, §3.2. Shaikh et al. (2025) O. Shaikh, S. Sapkota, S. Rizvi, E. Horvitz, J. S. Park, D. Yang, and M. S. Bernstein Creating general user models from computer use. In Proceedings of the 38th Annual ACM Symposium on User Interface Software and Technology, UIST ā25, New York, NY, USA. External Links: Document Cited by: §2.5, item 2. Shrout and Fleiss (1979) P. E. Shrout and J. L. Fleiss Intraclass correlations: uses in assessing rater reliability. Psychological Bulletin 86 (2), p. 420ā428. External Links: Document Cited by: §7.7. Soto and John (2017) C. J. Soto and O. P. John The next Big Five Inventory (BFI-2): developing and assessing a hierarchical model with 15 facets to enhance bandwidth, fidelity, and predictive power. Journal of Personality and Social Psychology 113 (1), p. 117ā143. External Links: Document Cited by: §2.4, §4.3. Specht et al. (2011) J. Specht, B. Egloff, and S. C. Schmukle Stability and change of personality across the life course: the impact of age and major life events on mean-level and rank-order stability of the Big Five. Journal of Personality and Social Psychology 101 (4), p. 862ā882. External Links: Document Cited by: §1, item Personality. Stein and Swan (2019) R. Stein and A. B. Swan Evaluating the validity of Myers-Briggs Type Indicator theory: a teaching tool and window into intuitive psychology. Social and Personality Psychology Compass 13 (2), p. e12434. External Links: Document Cited by: §2.4, §4.3. Sun (2024) R. Sun Can a cognitive architecture fundamentally enhance LLMs? or vice versa?. External Links: 2401.10444, Document, Link Cited by: §2.10. Tan et al. (2025) J. Tan, L. Yang, Z. Liu, Z. Liu, R. Murthy, T. M. Awalgaonkar, J. Zhang, W. Yao, M. Zhu, S. Kokane, S. Savarese, H. Wang, C. Xiong, and S. Heinecke PersonaBench: evaluating AI models on understanding personal information through accessing (synthetic) private user data. External Links: 2502.20616, Document, Link Cited by: §2.2. Tan and Jiang (2023) Z. Tan and M. Jiang User modeling in the era of large language models: current research and future directions. External Links: 2312.11518, Document, Link Cited by: §1. Tan et al. (2024) Z. Tan, Q. Zeng, Y. Tian, Z. Liu, B. Yin, and M. Jiang Democratizing large language models via personalized parameter-efficient fine-tuning. In Proceedings of the 2024 Conference on Empirical Methods in Natural Language Processing, Miami, Florida, USA, p. 6476ā6491. External Links: Document Cited by: §1, §2.2. Tausczik and Pennebaker (2010) Y. R. Tausczik and J. W. Pennebaker The psychological meaning of words: LIWC and computerized text analysis methods. Journal of Language and Social Psychology 29 (1), p. 24ā54. Note: Published online 2009; print issue 2010 External Links: Document Cited by: §2.4. Teevan et al. (2005) J. Teevan, S. T. Dumais, and E. Horvitz Personalizing search via automated analysis of interests and activities. In Proceedings of the 28th Annual International ACM SIGIR Conference on Research and Development in Information Retrieval, SIGIR ā05, New York, NY, USA, p. 449ā456. External Links: Document Cited by: §1, §2.1. Vazire (2010) S. Vazire Who knows what about a person? The self-other knowledge asymmetry (SOKA) model. Journal of Personality and Social Psychology 98 (2), p. 281ā300. External Links: Document Cited by: §2.4, §6.3, §9.5. Wang et al. (2023) A. Wang, C. Aggazzotti, R. Kotula, R. Rivera Soto, M. Bishop, and N. Andrews Can authorship representation learning capture stylistic features?. Transactions of the Association for Computational Linguistics 11, p. 1416ā1431. External Links: Document Cited by: §2.9, §6.7. Wang et al. (2025) A. Wang, J. Morgenstern, and J. P. Dickerson Large language models that replace human participants can harmfully misportray and flatten identity groups. Nature Machine Intelligence 7 (3), p. 400ā411. External Links: Document Cited by: §2.9, §6.1, §9.5. Wang et al. (2024a) P. Wang, L. Li, L. Chen, Z. Cai, D. Zhu, B. Lin, Y. Cao, L. Kong, Q. Liu, T. Liu, and Z. Sui Large language models are not fair evaluators. In Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers), p. 9440ā9450. External Links: Document Cited by: §2.9, §6.7. Wang et al. (2024b) T. Wang, M. Tao, R. Fang, H. Wang, S. Wang, Y. E. Jiang, and W. Zhou AI PERSONA: towards life-long personalization of LLMs. External Links: 2412.13103, Document, Link Cited by: §2.2. Wegmann et al. (2022) A. Wegmann, M. Schraagen, and D. Nguyen Same author or just same topic? Towards content-independent style representations. In Proceedings of the 7th Workshop on Representation Learning for NLP, p. 249ā268. External Links: Document Cited by: §2.9, §6.7. Xue et al. (2016) B. Xue, M. Zhang, W. N. Browne, and X. Yao A survey on evolutionary computation approaches to feature selection. IEEE Transactions on Evolutionary Computation 20 (4), p. 606ā626. External Links: Document Cited by: §2.8. Yarkoni (2010) T. Yarkoni Personality in 100,000 words: a large-scale analysis of personality and word use among bloggers. Journal of Research in Personality 44 (3), p. 363ā373. External Links: Document Cited by: §2.4, §3.2. Youyou et al. (2015) W. Youyou, M. Kosinski, and D. Stillwell Computer-based personality judgments are more accurate than those made by humans. Proceedings of the National Academy of Sciences 112 (4), p. 1036ā1040. External Links: Document Cited by: §2.4. Yuan et al. (2022) A. Yuan, A. Coenen, E. Reif, and D. Ippolito Wordcraft: story writing with large language models. In 27th International Conference on Intelligent User Interfaces, p. 841ā852. External Links: Document Cited by: §2.7. Zhang et al. (2024a) K. Zhang, Y. Kang, F. Zhao, and X. Liu LLM-based medical assistant personalization with short- and long-term memory coordination. External Links: 2309.11696, Document, Link Cited by: §2.2. Zhang et al. (2025) Z. Zhang, R. A. Rossi, B. Kveton, Y. Shao, D. Yang, H. Zamani, F. Dernoncourt, J. Barrow, T. Yu, S. Kim, R. Zhang, J. Gu, T. Derr, H. Chen, J. Wu, X. Chen, Z. Wang, S. Mitra, N. Lipka, N. Ahmed, and Y. Wang Personalization of large language models: a survey. Transactions on Machine Learning Research. Note: Preprint available as arXiv:2411.00027 External Links: Document Cited by: §1, §2.2. Zhang et al. (2024b) Z. Zhang, M. Jia, H. Lee, B. Yao, S. Das, A. Lerner, D. Wang, and T. Li āItās a fair gameā, or is it? Examining how users navigate disclosure risks and benefits when using LLM-based conversational agents. In Proceedings of the CHI Conference on Human Factors in Computing Systems, p. 1ā26. External Links: Document Cited by: §10, §2.6. Zheng et al. (2023) L. Zheng, W. Chiang, Y. Sheng, S. Zhuang, Z. Wu, Y. Zhuang, Z. Lin, Z. Li, D. Li, E. Xing, H. Zhang, J. Gonzalez, and I. Stoica Judging LLM-as-a-judge with MT-Bench and chatbot arena. In Advances in Neural Information Processing Systems 36, Vol. 36, p. 46595ā46623. External Links: Document Cited by: §2.9. Zhou et al. (2024) Y. Zhou, Q. Zhu, J. Jin, and Z. Dou Cognitive personalized search integrating large language models with an efficient memory mechanism. In Proceedings of the ACM Web Conference 2024, W ā24, New York, NY, USA, p. 1464ā1473. External Links: Document Cited by: §1, §2.2. Appendix A The Full Atomic User Model Specification Table 19 gives the full specification. Fields marked ā form the reduced 32-field instrument used in both studies and listed in Table 2; they are the only fields for which this paper reports evidence. The remainder are part of the specification but were not exercised, and we flag that distinction rather than presenting the whole schema as validated. Table 19: The full aum specification, 60 fields across five tiers plus cross-shell integration. ā marks the 32 fields in the reduced instrument used in both studies. Ļ is the nominal update period for the tier. Tier Ļ Fields Nucleus core identity years Core Valuesā ; Fundamental Beliefsā ; Identity Anchorsā ; Moral Frameworkā ; Existential Orientationā ; Life Purposeā ; Self-Concept; Non-Negotiables; Sources of Meaning; Legacy Orientation Shell 1 psychological core months Big Five Profileā ; Emotional Architectureā ; Attachment Styleā ; Motivational Driversā ; Fear Mapā ; Stress Responseā ; Type Inventory (e.g. MBTI, where known); Emotional Regulation Strategy; Risk Disposition; Self-Efficacy Beliefs Shell 2 cognitive and experiential months Formative Experiencesā ; Difficult Episodesā ; Learning Styleā ; Cognitive Styleā ; Life Narrativeā ; Knowledge Baseā ; Domain Expertise; Skill Inventory; Memory Salience; Attention Profile Shell 3 behavioural patterns weeks Daily Habitsā ; Communication Patternsā ; Decision Behaviourā ; Coping Mechanismsā ; Relationship Behaviourā ; Work Habitsā ; Conflict Behaviour; Time and Planning Behaviour; Consumption Patterns; Information Seeking Behaviour Shell 4 social and contextual weeks Social Rolesā ; Cultural Conditioningā ; Digital Identityā ; Reputationā ; Social Maskā ; Register Rangeā ; Physiological Traits; Language Repertoire; Network Position; Situational Constraints CrossShell integration months Internal Conflictsā ; Authenticity Indexā ; Growth Trajectory; Shell Alignment Map; Change Readiness; Contradiction Log; Self-Other Divergence; Stability Estimate; Confidence Annotation; Provenance Record Four properties of the schema are worth restating in one place. 1. Every field value is a short first-person natural-language sentence, not a score or a vector. 2. The (shell,name)(shell,name) pairs are fixed, so two usersā models are structurally comparable and Ļā”(t)Ļ(t) is definable. 3. Update period Ļ is a tier property, so a refresh policy can be written without consulting field values. 4. The CrossShell tier is not a sixth shell but a set of relations over the other five. Internal Conflicts and Contradiction Log record where a Shell 3 behaviour contradicts a Nucleus value; Authenticity Index and Shell Alignment Map measure agreement between what the inner shells hold and what the outer shells present; Confidence Annotation and Provenance Record track how a field was populated and how much weight it should carry. Appendix B Prompts Every prompt used in the simulation study is reproduced here verbatim. Placeholders in braces are substituted at run time. B.1 Persona conditioning block Prepended as the system message for every generation the simulated participant performs. You are role-playing a specific person. Stay in character at all times. Personality (Big Five z-scores, -2 low to +2 high): traits Life context: context Formative background: narrative How you actually write: idiolect Write the way this person writes, including its rough edges. Do not describe the persona; be it. B.2 Instrument population You are completing a guided self-report instrument called the Atomic User Model. Fill in EVERY field below with one short first-person sentence (roughly 10 to 25 words) describing yourself truthfully in character. Be specific and concrete; avoid generic self-description that could apply to anyone. The JSON MUST contain all six shells (Nucleus, Shell1_Psychological, Shell2_Cognitive, Shell3_Behavioural, Shell4_Social, CrossShell) and all 32 fields as non-empty strings. Do not leave any shell empty. Do not nest extra objects inside a field; each field value is a single sentence string. Return ONLY a valid JSON object with exactly this structure and these keys: schema No commentary, no markdown fences. On a failed parse the following corrective is appended and the call retried, up to six attempts: Your previous JSON filled too few fields. Fill ALL 32 fields in ALL six shells. Every value must be a non-empty first-person sentence. Empty shells are not acceptable. B.3 Prompt surface The only user-derived text the retriever ever sees. Generated with the persona block plus the participantās completed instrument as system context. You are typing a request to an AI assistant. Write only the message you would type, in your own voice, with your own level of detail and formality. Do not write the assistantās answer. What you want help with: task Keep it under 60 words. Output the message only. B.4 Reference text The ground truth. Generated without sight of the prompt surface. Write your own response to the task below, exactly as you would actually write it yourself, with no assistant helping you. Match your usual length, structure, formality and habits. Task: task Output the text only, with no preamble. B.5 Prior conversations for the preference-notes baseline Four transcripts per participant, on topics held out from the evaluation battery. Write a short transcript of a past conversation you had with an AI assistant, four to six turns, labelled āUser:ā and āAssistant:ā. The topic was: topic. Write your own turns in your own voice. Let your preferences and habits show through naturally rather than stating them outright. The six held-out topics are: choosing between two laptops for everyday work; sorting out a recurring problem with a household appliance; putting together a week of simple meals; deciding what to do with a free Saturday; picking a book to read next; working out how to reply to a slightly awkward group message. B.6 Preference-note distillation Run by a separate summariser with no access to the persona or the aum. System: You are the memory component of an AI assistant. You read past conversations and store durable user preferences as a flat list of short statements, the way a production memory feature does. You have no other information about the user. User: From the transcripts below, extract the durable preferences worth remembering about this user. Write at most 12 short statements, one per line, each starting with ā- ā. Record preferences and habits only, not events. No headings, no commentary. transcripts B.7 Task classifier System: You route requests for a personalised assistant. A request is āsimpleā if a correct answer is the same regardless of who asked (a factual lookup, a unit conversion, an arithmetic result). It is ācomplexā if the form of an acceptable answer depends on who is asking. Answer with JSON only. User: Classify this user request. Request: prompt_surface Return JSON: "complexity": "simple" or "complex", "task_type": one of [communication, self_presentation, relational_evaluative, planning_decision, explanatory, creative, factual] B.8 Generation System: You are a helpful AI assistant. Complete the userās task and return only the finished text they asked for, with no preamble, no explanation of your choices, and no options. User: context_blockUser request: prompt_surface The context block is empty for the generic condition, and otherwise a delimited section: [Selected user model fields] followed by one bulleted field per line and a closing tag, or [Remembered user preferences] for the preference-notes condition, or [User model] followed by the full instrument as JSON for the Full aum condition. Context tokens are counted on exactly this string. B.9 Fidelity judge System: You are judging, on behalf of a specific person, whether a piece of text reads like something that person would have written. You are given that personās self-description and one text they genuinely wrote. Judge style, voice, length, structure and habits, not whether the text is good. Answer with a single integer and nothing else. User: The person: - Life context: context - How they write: idiolect A text this person genuinely wrote for the task "task": --- reference --- Now rate this other text for the same task on a 1 to 5 scale, where 5 means āthis reads exactly like something they would have writtenā and 1 means āthis does not read like them at allā. --- candidate --- Return ONLY a single integer from 1 to 5. The judge never receives the aum. Only the personaās life context and idiolect line are shown, plus the participantās own reference. B.10 Identification judge System: You are shown one text a specific person genuinely wrote, and four candidate texts for the same task. Exactly one candidate was produced by a system that had access to a model of that person. Choose the candidate whose style most closely matches the personās own writing. Answer with a single letter. User: The person: - Life context: context - How they write: idiolect A text this person genuinely wrote for the task "task": --- reference --- Candidates: A, B, C, D in a per-trial shuffled order Return ONLY the letter of the candidate that best matches this personās own style. Appendix C The Simulated Participants The sixteen personas are declared in code rather than sampled, so the population is fixed across seeds and auditable. Each carries Big Five z-scores, a life context, a formative-experience seed and idiolect markers. Table 4 in the body gives the abridged form; Table 20 gives the life context and formative background in full. Table 20: Life context and formative background for each simulated participant. Label Life context Formative background meticulous planner Operations lead at a mid-size logistics firm; runs everything from checklists. A shipment error early in their career cost the company a client; they have double-checked everything since. warm over-explainer Secondary school teacher; the person colleagues go to when something needs smoothing over. Grew up as the eldest of four and became the household mediator before they were twelve. blunt minimalist Backend engineer; treats most meetings as an unpriced tax on the day. Learned to code alone at fourteen from documentation and has never quite unlearned the register. associative creative Freelance illustrator; several projects always half-open at once. Dropped out of an economics degree to go to art school and treats that as the decision that defines them. analytical flat Quantitative analyst; distrusts any claim without an interval attached. A badly designed undergraduate experiment taught them how easy it is to fool yourself with data. bright energetic Community manager for a hobbyist platform; genuinely likes the people they work with. Found their footing running a fan forum as a teenager and never lost the habit of talking to a crowd. dry sceptic Investigative reporter turned freelance editor; assumes the press release is lying. Watched a story they had championed fall apart under fact-checking and now leads with the caveat. formal correct Civil servant in a planning department; twenty years of writing that must survive scrutiny. Trained in an office where a misplaced comma in a notice could invalidate it. scattered fast Startup founder wearing four hats; replies from three time zones in one week. Left a stable job on two weeksā notice and has been running on that momentum for three years. nurturing relational Paediatric nurse; the emotional temperature of a room is the first thing they read. A long stretch caring for a grandparent taught them that people mostly want to be heard first. competitive driver Sales director; keeps a personal scoreboard nobody asked to see. Came up through a commission-only role and still measures the week in closed deals. reflective introvert Archivist; the working day is mostly quiet and they prefer it that way. Spent a year abroad where they spoke the language badly and learned to say less, better. storytelling extrovert Corporate trainer; cannot make a point without an anecdote attached. Grew up in a family where dinner was competitive storytelling and brevity lost. pragmatic efficient Site foreman; the day is measured in what got finished. Twenty years on sites where the person who over-explained held everyone else up. quirky metaphorical Research librarian with a sideline in cryptic crosswords. Was the child who read the encyclopaedia for fun and has never found a better hobby. stoic calm Emergency dispatcher; twelve-hour shifts where panic is the one useless response. Learned early that the calmest voice on the line is the one that gets things done. Appendix D Additional Statistical Detail D.1 Judge reliability across seeds Table 21: Agreement between the fidelity judgeās ratings across seeds, over 960 (condition, participant, task) targets. ICC(2,1) over all three seeds is 0.573. Seed A Seed B n Exact Within 1 Spearman Ļ 0 1 960 43.1% 87.4% 0.589 0 2 960 42.0% 85.6% 0.546 1 2 960 43.2% 86.9% 0.599 D.2 Use of the rating scale, and position of the chosen option Table 22: Left: distribution of fidelity ratings over all 2,880 trials. Right: share of identification trials in which the judge chose the option in each slot, against the uniform 25% expectation, with Wilson intervals. A chi-square test over slots gives Ļ2=7.37Ļ^2=7.37, 3 d.f., p=0.061p=0.061. Rating % of trials Slot Chosen % 95% CI 1 13.8% A 066 22.9% [18.4, 28.1] 2 25.2% B 084 29.2% [24.2, 34.7] 3 25.8% C 079 27.4% [22.6, 32.9] 4 30.9% D 059 20.5% [16.2, 25.5] 5 04.3% D.3 Payload composition by task type Table 23: Share of the retrieved payload drawn from each shell, by task type, over all aum-r trials. Rows sum to 100% up to rounding. This is the tabular form of Figure 11. Task type Nucleus Shell 1 Shell 2 Shell 3 Shell 4 Cross communication 00.3 00.5 00.3 44.4 42.3 12.2 self-presentation 37.2 11.5 01.0 01.3 41.2 07.8 relational-evaluative 24.7 13.3 00.0 45.6 01.6 14.8 planning-decision 00.0 21.3 21.6 49.5 00.0 07.6 explanatory 00.0 00.0 30.0 40.1 17.5 12.5 D.4 Optimality of each retriever where exhaustive search is tractable Table 24: Share of instances in which each method returned the exhaustive optimum, over the twelve cells of the scaling sweep where (nk)ā¤60,000 nk⤠60,000 and exhaustive search was therefore computed. 25 instances per cell. Method Exact optimum found AFSA (greedy warm start) 96.3% AFSA (scaled budget) 84.7% Forward greedy 77.7% AFSA (study budget) 46.3% Dense top-k 41.3% Random 00.0%