Host-resolved project identity: the canonical workspace root, digested
into a stable scope key. The HOST constructs this from trusted execution
context — it is never accepted solely from model-authored arguments.
Sensitivity class of a memory record (spec §9.5). Enforcement at the
model-visibility boundary lives in the memory tools: Secret bodies are
never returned to model context.
Fetch exact record ids within a project scope. EVERY id must resolve in
this scope or the whole call fails closed with MemoryError::NotFound
— other projects’ ids are indistinguishable from unknown ids.
Tombstone one record in a project scope (append-only forget). Fails
closed with MemoryError::NotFound for unknown, already-tombstoned,
or other-project ids.