PRIVATE / USERconfidence 0.96
Customer prefers architecture reviews to include a rollback plan and an explicit verification gate.
captured from /onboarding/notes.md:42
INTERACTIVE WALKTHROUGH / NO BACKEND REQUIRED
Memory with a control plane.
This demo shows the operating model: scoped memory, source-aware retrieval, explicit promotion, and refresh safety. It is a product walkthrough—not a live customer environment.
Scoped memory
The same agent can hold private, shared, and temporary context without mixing them.
SHARED / TEAMpromoted 2h ago
Production changes require an isolated canary before the live deployment.
promoted by team-admin · policy/engineering.md:18
RUN / TEMPORARYexpires with run
For this incident review, compare the current gateway route against the last known-good configuration.
run_7f31 · not promoted
Provenance-aware search
Every result carries enough context for a human to inspect where it came from.
Rollback plan required for architecture reviews/onboarding/notes.md:42 · PRIVATE
Customer preference captured during onboarding; available only to the scoped user and agent.
Production changes need an isolated canarypolicy/engineering.md:18 · SHARED
Team policy promoted explicitly by an administrator.
Promotion policy
Shared memory is not a side effect. It is an explicit decision.
DEFAULT WRITEPRIVATE
New memories stay scoped to the originating user and agent.
SHARED WRITEAPPROVAL REQUIRED
A human or approved policy promotes a memory into shared context.
RUN CONTEXTEPHEMERAL
Temporary investigation context expires with the run unless promoted.
KNOWLEDGE REFRESHREAD-ONLY MIRROR
Knowledge indexing does not write into production memory.
✓ default-private · ✓ explicit promotion · ✓ no accidental cross-tenant sharing
Safe refresh
A knowledge refresh should be boring, repeatable, and observable.
Capture baseline
Record production memory count and current kg state.
Index sources
Normalize paths, upsert Wiki and CodeGraph nodes, preserve provenance.
Mirror read-only
Refresh the knowledge-layer mirror without writing to public.mem0.
Verify invariant
public.mem0 before: 326 · after: 326 · unchanged: true
✓ idempotent refresh · ✓ source paths normalized · ✓ production writes: false
Want to map this to your stack? Book a 15-minute architecture call →