From a2ca5c1c8a0dbf8e496acabb1986c99cbf7ba034 Mon Sep 17 00:00:00 2001 From: Galin Iliev Date: Sun, 9 Aug 2026 17:12:12 -0700 Subject: [PATCH] docs(memory): align Phase 0 shadow definition of done --- docs/concepts/2026-07-29-memory-impl-plan.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/concepts/2026-07-29-memory-impl-plan.md b/docs/concepts/2026-07-29-memory-impl-plan.md index 7fe7b992def4..580a723d7fe5 100644 --- a/docs/concepts/2026-07-29-memory-impl-plan.md +++ b/docs/concepts/2026-07-29-memory-impl-plan.md @@ -452,8 +452,10 @@ current implementation head: - [ ] Phase 0 exposes no trusted-context factory or enforcement admission path; tool JSON, prompt text, plugin extras, and caller-assembled objects therefore cannot opt into or modify an enforced authorization plan. -- [ ] Every selected backend must declare authorization capabilities, and the - conformance suite rejects a context-free backend in enforced mode. +- [ ] Shadow inspection records whether the selected backend has a conforming + declared authorization surface, and the conformance suite rejects a + context-free allow-all adapter. A later Phase 1A admission path must + reject any backend selected for an enforced agent without that surface. - [ ] Shadow evaluation emits only bounded selected-runtime surface metadata; it never logs memory content, prompts, queries, snippets, or raw principal identifiers, and does not claim to evaluate context-free policy