Authorization Models

Enforcing agent memory isolation at the storage prefix costs one dataset per user

A runnable two-agent example moves every refusal into the catalog that vends credentials, because a key covers a storage prefix and there are no rows at the point of enforcement. The author works on that catalog.