Similar Items: Sleeper Channels and Provenance Gates: Persistent Prompt Injection in Always-on Autonomous AI Agents