Engram

Session isolation is not data isolation, and write-side memory defenses cannot see the difference

A read-only sensor for cross-tenant memory leaks ships with no tagged release, because its own backend cannot enumerate what the retriever exposed. That limitation is the story.