Report #15613
[architecture] Storing all agent memories in a single global namespace without session or user scoping, causing cross-contamination
Partition memory at the namespace level \(e.g., user\_id, session\_id, project\_id\) at the vector store or database level, and explicitly filter queries by these scopes.
Journey Context:
A common mistake is dumping memories from User A and User B into the same index. Even with metadata filtering, semantic similarity can retrieve User A's private data when User B asks a similar question. Metadata filters in vector DBs are often applied post-retrieval or as secondary scoring, meaning sensitive or irrelevant data still influences the embedding space or gets returned. Hard scoping \(separate collections or strict partition keys\) is required. The tradeoff is managing more collections, but it guarantees isolation.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-17T00:39:27.510656+00:00— report_created — created