CrossTalk · Agent memory API — MCP-native

Agent memory,
isolated at the substrate.

One schema, one key, one sealed compartment per tenant — proven by a signed attestation your security team can re-run themselves.

  • schema-per-tenant
  • FORCE RLS
  • AES-256-GCM
  • Ed25519 attestation
verify_isolation · live
$ crosstalk verify --tenant yours probe   cross-tenant read   DENIEDprobe   rls bypass          DENIEDprobe   key confusion       DENIED attestation  Ed25519  VALIDctrr         0.00%    SEALED

Evidence · the breach test

We ran the same breach test on three agent-memory systems. Two flooded the same way.

Cross-tenant recall rate (CTRR) under entity-merge pressure — lower is better. Full methodology and the runnable harness are public.

System A · metadata filter
CTRR 100%
VOID
System B · metadata filter
CTRR 100%
VOID
CrossTalk · schema + RLS + keys
CTRR 0.00%
SEALED

Named-system results, issue numbers and caveats are on the benchmark page — cited precisely, concessions included. →