internal/memory and migration 000017 are built and applied in production, so
the earlier "not built, deliberately" is now wrong in the direction that gets
overclaimed: the code exists, the table exists, and no answer has ever been
shaped by a memory because nothing in loop.go reads or writes one.
The document now says what the store IS — org-scoped, every personal memory
named to a subject so it can be produced or erased, provenance on each row,
ninety-day expiry, and a block that states a memory can never on its own be a
reason to accept or reject anybody — and says separately that none of it is
wired.
The claims section gains the sentence that matters: "the agent remembers across
sessions" is the thing most likely to be said by accident now, because the code
and the table both exist. Built is not the same as switched on.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Read from the code rather than from intent, after a conversation in which the
honest answer to "are we using RAG and memory correctly" took an hour of
digging that nobody should have to repeat.
It records three things that are easy to get wrong when describing this system
to somebody else: that retrieval is hybrid with the permission predicate as a
PRE-filter rather than a post-filter, that only two of nine agents use it and
that is the design, and that long-term memory is absent on purpose rather than
by omission — with the schema comment that says so quoted in place.
It also states what the document does NOT support claiming, because the failure
this guards against is overclaiming to a client, not under-documenting.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
