The Memory Curator is the durable-write owner for governed MATM. Workers emit proposal-only Memory Events; the curator decides whether and where a durable Memory Record should exist.
Nine-Step Curation Pipeline
- Schema admission: reject malformed events, unsupported fields, non-UTC timestamps, direct-write states, and unsafe extension names.
- Safety and redaction: remove secrets, private data, prompt-injection payloads, and hidden reasoning before durable review.
- Source and provenance check: verify event origin, artifact, source references, task id, and producer identity.
- Scope routing: classify into session, project, agent_team, agent_repo, or discard disposition.
- Kind classification: assign fact, decision, preference, risk, procedure, hypothesis, evidence, deprecation, or conflict.
- Evidence sufficiency: decide whether the event can support a durable claim, needs review, or stays hypothesis.
- Deduplication and idempotency: merge exact duplicate ids and route redundant events to existing records.
- Conflict analysis: preserve credible opposing claims and route to human or specialist review.
- Disposition and audit: append, update, deprecate, conflict, or discard; record reason, reviewer, and next review date.
Disposition Operations
| Operation | Use when | Not this |
|---|---|---|
| append | New reviewed memory should be added. | Not a worker direct write. |
| update | Existing record should be revised with source and audit trail. | Not silent overwrite. |
| deprecate | Existing record is superseded, stale, unsafe, or retired. | Not routine delete. |
| conflict | Credible incompatible claims need preservation and review. | Not fake consensus. |
| discard | Event is malformed, unsafe, unauthorized, redundant, unsupported, or out of scope. | Not searchable durable memory. |
Scaling Pattern
Start deterministic, add model assistance only where policy permits, and keep a human steward for sensitive, cross-scope, public, production, legal, security, privacy, and high-impact records. Curator automation can triage; it should not erase the need for audit and reviewer ownership.