docs(memory): align Phase 0 shadow definition of done

This commit is contained in:
Galin Iliev
2026-08-09 17:12:12 -07:00
parent 6c42369e9a
commit a2ca5c1c8a
+4 -2
View File
@@ -452,8 +452,10 @@ current implementation head:
- [ ] Phase 0 exposes no trusted-context factory or enforcement admission path;
tool JSON, prompt text, plugin extras, and caller-assembled objects
therefore cannot opt into or modify an enforced authorization plan.
- [ ] Every selected backend must declare authorization capabilities, and the
conformance suite rejects a context-free backend in enforced mode.
- [ ] Shadow inspection records whether the selected backend has a conforming
declared authorization surface, and the conformance suite rejects a
context-free allow-all adapter. A later Phase 1A admission path must
reject any backend selected for an enforced agent without that surface.
- [ ] Shadow evaluation emits only bounded selected-runtime surface metadata;
it never logs memory content, prompts, queries, snippets, or raw
principal identifiers, and does not claim to evaluate context-free policy