CrossTalk · Agent memory API — MCP-native
Agent memory,
isolated at the substrate.
One schema, one key, one sealed compartment per tenant — proven by a signed attestation your security team can re-run themselves.
- schema-per-tenant
- FORCE RLS
- AES-256-GCM
- Ed25519 attestation
verify_isolation · live
$ crosstalk verify --tenant yours probe cross-tenant read DENIEDprobe rls bypass DENIEDprobe key confusion DENIED attestation Ed25519 VALIDctrr 0.00% SEALEDSEALED
Evidence · the breach test
We ran the same breach test on three agent-memory systems. Two flooded the same way.
Cross-tenant recall rate (CTRR) under entity-merge pressure — lower is better. Full methodology and the runnable harness are public.
System A · metadata filter
CTRR 100%
VOIDSystem B · metadata filter
CTRR 100%
VOIDCrossTalk · schema + RLS + keys
CTRR 0.00%
SEALED