Abstract
Disclosed is a species-level arrangement for governing an installed application's access to an agent memory through a single enforced facade, with four pinned properties: the acting identity and the data scope are derived from the presented credential and the installation record, never asserted by the caller; the invocation record is written before any output leaves; the application's own writes are readable back through the same door under an application-private provenance scope rather than through a second, ungoverned path; and the data resources an application may touch are declared in its manifest and separately granted in the installation ledger, with both required and both shown to the person approving the installation. Disclosed additionally is the honest boundary condition that makes such claims meaningful: a chokepoint claim is only as strong as the set of doors it actually covers, so the disclosure states the operator path and any directly exposed server endpoint as named exceptions rather than presenting the facade as universal.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
Bering, Alexander, "Credential-Bound Capability Chokepoint for Agent-Memory Access by Installed Applications", Technical Disclosure Commons, ()
https://www.tdcommons.org/dpubs_series/11253