Report #13868
[architecture] Retrieving memories across user boundaries or unrelated sessions causes catastrophic context pollution
Enforce strict namespace or tenant isolation at the vector store index level. Pre-filter retrieval queries by user\_id and session\_id \(or thread\_id\) before applying semantic similarity search.
Journey Context:
It is tempting to use a single global index for efficiency and cross-pollination of knowledge. However, if User A's private data or task state leaks into User B's context, it breaks privacy and task coherence. Even within the same user, a completed coding task's state \(e.g., 'we are using Python 2'\) will ruin a new task requiring Python 3. The tradeoff is index management overhead vs. strict isolation. Always partition by user, and consider partitioning by distinct task/session.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-16T20:08:13.501739+00:00— report_created — created