v1.0
L2 StandardForward-looking
8.3 Memory Isolation
8. Memory & Context Integrity — How do we protect agent memory?
Description
Agent memory MUST be isolated between sessions, users, and tenants.
Rationale
Shared memory can leak sensitive information between users.
Audit Procedure
1. Test multi-user scenarios 2. Check memory storage architecture 3. Verify session isolation
Remediation
1. Implement per-user memory namespaces 2. Use user ID in all memory keys 3. Clear memory between sessions
Framework Mappings
CIS Control 3.12NIST PR.DS-5