The shipped boundaryrc.7 includes durable Sessions and default-off MCP memory examples. It does not ship a generic ctx.memory service.

Give each kind of state one owner.

Reopen this interactionSession

Replay ordered Agent events, tool calls, results, and model-visible history.

same conversation
Reduce context pressureCompaction

Replace an older model-visible range while preserving the durable event history.

same Session
Apply on every runSkill

Mount stable operating instructions deterministically. Do not hope retrieval finds policy.

instruction scope
Reuse selected factsMemory

Retrieve scoped preferences or observations through a visible tool or assembly policy.

across Sessions
Preserve contractual truthApp record

Keep audit and business facts outside model memory and independent of recall.

system of record

Migrate semantics, not folders.

Make one record survive two independent Sessions.

  1. SaveSession A writes a harmless nonce and returns a durable record ID.
  2. RecallFresh Session B finds it through a visible search operation.
  3. IsolatePrincipal C cannot retrieve the record.
  4. RepeatThe same import digest creates no duplicate.
  5. DistrustInstruction-like memory remains quoted data, never active policy.

Audit the plugin as Host code.

01IdentityRepository, publisher, tarball, version
02EffectsScripts, network, files, injected services
03SurfaceWhere recall enters the model request
04RemovalCold restart and Session load without it

Primary evidence.

Keep the acceptance test.

The full guide includes ownership boundaries, idempotent migration fields, unknown outcomes, failure routing, and a community-plugin release gate.

Read the full guide