Module memory 

Model-facing project memory: notes and archived context windows.

Four tools over the host memory binding, registered in the standard catalog and therefore DEFERRED under progressive disclosure (they are not in the essential core set — discovery/activation gates apply):

• memory_search: bounded descriptors + snippets, never full bodies;
• memory_fetch: exact ids only, sensitivity-enforced;
• memory_store: explicit project binding, provenance, sensitivity, retention;
• memory_forget: append-only tombstone.

There is one scope: the project of the chat’s folder, which the HOST resolves. A model-supplied project argument only CONFIRMS it. The tools once took a scope argument (repository, or user for user-wide notes); it is gone from their schemas, scope: "repository" is still accepted and ignored, and any other value is refused. Results enter model context as LOWER-AUTHORITY data with provenance — every output opens with LOWER_AUTHORITY_HEADER. secret-class bodies are never returned to model context.

Structs

MemoryFetchTool

MemoryForgetTool

MemorySearchTool

MemoryStoreTool

Constants

LOWER_AUTHORITY_HEADER

Authority banner prepended to every memory tool result.