{
  "version": "v1.1",
  "status": "ACTIVE",
  "document_role": "memory_partitioning_authority",
  "objective": "Define canonical memory isolation, flexible namespace partitioning and scoped retrieval rules.",
  "namespace_model": {
    "mode": "flexible_scope_set",
    "rule": "scope is validated by compatible namespace set, not by fixed hierarchy order"
  },
  "supported_namespace_dimensions": [
    "org_id",
    "tenant_id",
    "client_id",
    "project_id",
    "workspace_id",
    "agent_id",
    "user_id",
    "session_id",
    "memory_class"
  ],
  "memory_classes": [
    "yeff_global",
    "tenant_shared",
    "client_shared",
    "project_shared",
    "agent_private",
    "user_private",
    "session_ephemeral"
  ],
  "required_rules": [
    "deny_if_scope_missing_when_scope_is_required",
    "deny_cross_boundary_by_default",
    "write_requires_identity_or_system_policy",
    "retrieval_requires_scope_filter_or_explicit_global_class",
    "audit_memory_mutation",
    "audit_scope_violation"
  ],
  "global_memory_policy": {
    "allowed_classes": [
      "yeff_global"
    ],
    "requires_explicit_policy": true,
    "must_be_tagged": true
  },
  "retrieval_scope_contract": {
    "scope_validation_mode": "compatible_scope_match",
    "must_include_at_least_one_of_when_not_global": [
      "tenant_id",
      "client_id",
      "project_id",
      "workspace_id",
      "agent_id",
      "user_id"
    ],
    "forbidden_without_explicit_policy": [
      "unscoped_retrieval_on_scoped_memory",
      "cross_tenant_retrieval",
      "cross_client_retrieval",
      "cross_project_retrieval"
    ]
  },
  "mutation_scope_contract": {
    "create": "scoped_or_explicit_global_class",
    "read": "scoped_or_explicit_global_class",
    "update": "scoped_or_explicit_global_class",
    "delete": "scoped_or_explicit_global_class"
  },
  "ui_monitoring_expectations": [
    "memory_scope_ready",
    "scope_violation_count",
    "unscoped_query_attempts",
    "cross_boundary_denials",
    "global_memory_access_events",
    "audit_link_coverage"
  ],
  "canon_meta": {
    "canon_id": "devon-memory-isolation-canonical",
    "version": "2.0.0",
    "status": "ACTIVE",
    "master_authority": "master_architecture_index.md",
    "preserve_original_content": true,
    "canonical_layer_key": "memory_layer",
    "phase_origin": [
      "phase-08"
    ],
    "installation_order": 60,
    "primary_stage": "memory_control_plane"
  },
  "governance_reference": {
    "master_authority": "master_architecture_index.md",
    "primary_axis": "canonical_layer",
    "secondary_axis": "deployment_order",
    "preserve_phase_registry": true,
    "preserve_original_content": true
  },
  "canonical_layer_key": "memory_layer",
  "phase_origin": [
    "phase-08"
  ],
  "installation_order": 60,
  "primary_stage": "memory_control_plane",
  "canonical_position": {
    "canonical_layer_key": "memory_layer",
    "phase_origin": [
      "phase-08"
    ],
    "installation_order": 60,
    "primary_stage": "memory_control_plane"
  }
}