Controls/Memory & Context Integrity/8.3
L2 StandardForward-looking

8.3 Memory Isolation

8. Memory & Context IntegrityHow do we protect agent memory?

Description

Agent memory MUST be isolated between sessions, users, and tenants.

Rationale

Shared memory can leak sensitive information between users.

Audit Procedure

1. Test multi-user scenarios
2. Check memory storage architecture
3. Verify session isolation

Remediation

1. Implement per-user memory namespaces
2. Use user ID in all memory keys
3. Clear memory between sessions

Framework Mappings

CIS Control 3.12NIST PR.DS-5