10000app
10000app #0082 · PMF pre-judgment 67/100 · real governance job, weak willingness to pay beside framework-native memory controls

A memory key is not a boundary.
A delete policy is not a tested deletion.

Describe candidate memories without pasting their contents. The deterministic review flags namespace/scope mismatches, broad readers or writers, unreviewed inferred sources, missing lifecycle fields and stale deletion tests. It stores nothing and never configures a memory service.

Review twelve memory contracts locally核对依据
Free · browser-only

Agent memory contract reviewer

Contract gateADD MEMORY CONTRACTS
Memories / invalid / duplicates0 / 0 / 0
Session / long-term0 / 0
Scope mismatch / broad access0 / 0
Unreviewed source / lifecycle gap0 / 0
Stale delete test / unknown0 / 0
Source / privacy holds0
Memory / classSubject / namespaceWriters / readersSource / reviewsRetention / triggerDelete test / evidenceFindings

    A static contract cannot prove runtime isolation, authorization, source integrity, retrieval behavior or deletion. Test those properties in the actual framework, store and identity boundary before deployment.

    Security and privacy boundary: analysis stays in this browser. The paid pack receives only redacted contract metadata. Never enter memory values, chat text, prompts, identities, account IDs, credentials, endpoints or configuration secrets. This tool neither reads nor writes a memory store, executes an agent, configures IAM, tests retrieval, verifies deletion, certifies isolation or guarantees protection from poisoning.

    Source ledger

    Framework semantics, scope controls and memory threats

    PMF pre-judgment 67/100 · real governance job, weak willingness to pay beside framework-native memory controls

    LangMem · Long-term memory conceptsLangMem documents hierarchical namespaces such as organization, user and application; the framework primitive does not choose the correct business subject boundary for a deployment.LangMem · Memory API referenceThe API exposes configurable namespace templates, including runtime user identifiers, showing why an explicit namespace contract matters.Google Agent Platform · Memory BankGoogle describes isolated memory collections per scope and long-term personalized memories that persist across sessions—a stronger managed substitute for this planning review.Google Agent Platform · Memory Bank setupOfficial setup guidance exposes IAM roles and configurable TTL, both runtime controls this static reviewer cannot enforce.OWASP · Agentic AI threats and mitigationsOWASP frames agentic systems through threat models; current Agentic Top 10 work includes memory and context poisoning as a security concern.