memorix 1.2.1 → 1.2.3

package/dist/index.js

@@ -209,7 +209,11 @@ CREATE TABLE IF NOT EXISTS observations (
   relatedCommits  TEXT,
   relatedEntities TEXT,
   sourceDetail    TEXT,
-  valueCategory   TEXT
+  valueCategory   TEXT,
+  admissionState  TEXT,
+  admissionReason TEXT,
+  visibility      TEXT,
+  sharedWithAgentIds TEXT
 );
 `;
     CREATE_MINI_SKILLS_TABLE = `
@@ -632,6 +636,8 @@ CREATE INDEX IF NOT EXISTS idx_observations_projectId ON observations(projectId)
 CREATE INDEX IF NOT EXISTS idx_observations_topicKey ON observations(projectId, topicKey);
 CREATE INDEX IF NOT EXISTS idx_observations_status ON observations(status);
 CREATE INDEX IF NOT EXISTS idx_observations_project_status_id ON observations(projectId, status, id);
+CREATE INDEX IF NOT EXISTS idx_observations_project_admission ON observations(projectId, status, admissionState, id);
+CREATE INDEX IF NOT EXISTS idx_observations_project_visibility ON observations(projectId, status, visibility, id);
 CREATE INDEX IF NOT EXISTS idx_mini_skills_projectId ON mini_skills(projectId);
 CREATE INDEX IF NOT EXISTS idx_sessions_projectId ON sessions(projectId);
 CREATE INDEX IF NOT EXISTS idx_sessions_status ON sessions(projectId, status);
@@ -676,6 +682,22 @@ CREATE UNIQUE INDEX IF NOT EXISTS idx_maintenance_jobs_active_dedupe
   WHERE status IN ('pending', 'running', 'retry');
 `;
     SCHEMA_MIGRATIONS = [
+      {
+        id: "1.2.2-observation-admission",
+        apply: (db2) => {
+          addColumnIfMissing(db2, "observations", "admissionState", "admissionState TEXT");
+          addColumnIfMissing(db2, "observations", "admissionReason", "admissionReason TEXT");
+          db2.exec("CREATE INDEX IF NOT EXISTS idx_observations_project_admission ON observations(projectId, status, admissionState, id)");
+        }
+      },
+      {
+        id: "1.2.2-observation-visibility",
+        apply: (db2) => {
+          addColumnIfMissing(db2, "observations", "visibility", "visibility TEXT");
+          addColumnIfMissing(db2, "observations", "sharedWithAgentIds", "sharedWithAgentIds TEXT");
+          db2.exec("CREATE INDEX IF NOT EXISTS idx_observations_project_visibility ON observations(projectId, status, visibility, id)");
+        }
+      },
       {
         id: "1.2-code-state-snapshots",
         apply: (db2) => {
@@ -2118,6 +2140,58 @@ var init_mini_skills = __esm({
   }
 });
 
+// src/memory/visibility.ts
+function resolveObservationVisibility(record) {
+  switch (record.visibility) {
+    case "personal":
+    case "team":
+    case "project":
+      return record.visibility;
+    default:
+      return "project";
+  }
+}
+function sharedAgentIds(record) {
+  if (Array.isArray(record.sharedWithAgentIds)) return record.sharedWithAgentIds;
+  if (typeof record.sharedWithAgentIds !== "string" || !record.sharedWithAgentIds) return [];
+  try {
+    const parsed = JSON.parse(record.sharedWithAgentIds);
+    return Array.isArray(parsed) ? parsed.filter((id) => typeof id === "string") : [];
+  } catch {
+    return [];
+  }
+}
+function canReadObservation(record, reader) {
+  if (!reader) return true;
+  const sameProject = reader.projectId === record.projectId;
+  const visibility = resolveObservationVisibility(record);
+  if (visibility === "project") return !reader.projectId || sameProject;
+  if (!sameProject || !reader.agentId) return false;
+  if (visibility === "team") return reader.isTeamMember === true;
+  return record.createdByAgentId === reader.agentId || sharedAgentIds(record).includes(reader.agentId);
+}
+function canManageObservation(record, reader) {
+  if (!reader) return true;
+  if (!reader.projectId || reader.projectId !== record.projectId) return false;
+  switch (resolveObservationVisibility(record)) {
+    case "project":
+      return true;
+    case "team":
+      return reader.isTeamMember === true;
+    case "personal":
+      return Boolean(reader.agentId && record.createdByAgentId === reader.agentId);
+  }
+}
+function filterReadableObservations(observations2, reader) {
+  return reader ? observations2.filter((observation) => canReadObservation(observation, reader)) : [...observations2];
+}
+var init_visibility = __esm({
+  "src/memory/visibility.ts"() {
+    "use strict";
+    init_esm_shims();
+  }
+});
+
 // src/config/config-paths.ts
 import { join } from "path";
 function getGlobalConfigTomlPath(homeDir) {
@@ -5345,7 +5419,8 @@ __export(orama_store_exports, {
   makeOramaObservationId: () => makeOramaObservationId,
   removeObservation: () => removeObservation,
   resetDb: () => resetDb,
-  searchObservations: () => searchObservations
+  searchObservations: () => searchObservations,
+  updateObservationMetadata: () => updateObservationMetadata
 });
 import { create, insert as insert2, search, remove as remove2, update, count, getByID } from "@orama/orama";
 function getLastSearchMode(projectId) {
@@ -5423,6 +5498,11 @@ async function initializeDb(options, generation) {
     source: "string",
     sourceDetail: "string",
     valueCategory: "string",
+    admissionState: "string",
+    admissionReason: "string",
+    visibility: "string",
+    createdByAgentId: "string",
+    sharedWithAgentIds: "string",
     documentType: "string",
     knowledgeLayer: "string"
   };
@@ -5561,6 +5641,13 @@ async function hydrateIndex(observations2, options = {}) {
         lastAccessedAt: obs.lastAccessedAt || "",
         status: obs.status ?? "active",
         source: obs.source || "agent",
+        sourceDetail: obs.sourceDetail ?? "",
+        valueCategory: obs.valueCategory ?? "",
+        admissionState: obs.admissionState ?? "",
+        admissionReason: obs.admissionReason ?? "",
+        visibility: obs.visibility ?? "project",
+        createdByAgentId: obs.createdByAgentId ?? "",
+        sharedWithAgentIds: JSON.stringify(obs.sharedWithAgentIds ?? []),
         documentType: "observation",
         knowledgeLayer: resolveKnowledgeLayer("observation", obs.sourceDetail, obs.source),
         ...compatibleVector ? { embedding: compatibleVector } : {}
@@ -5594,6 +5681,16 @@ async function insertObservation(doc) {
   await insert2(database, doc);
   rememberObservationDoc(doc);
 }
+async function updateObservationMetadata(projectId, observationId2, patch) {
+  const database = await getDb();
+  const id = makeOramaObservationId(projectId, observationId2);
+  const existing = getByID(database, id);
+  if (!existing) return false;
+  const next = { ...existing, ...patch };
+  await update(database, id, next);
+  rememberObservationDoc(next);
+  return true;
+}
 async function removeObservation(oramaId) {
   const database = await getDb();
   await remove2(database, oramaId);
@@ -5747,7 +5844,7 @@ async function searchObservations(options) {
     if (!projectIds) return true;
     const doc = hit.document;
     return projectIds.includes(doc.projectId);
-  }).filter((hit) => {
+  }).filter((hit) => canReadObservation(hit.document, options.reader)).filter((hit) => {
     if (statusFilter === "all") return true;
     const doc = hit.document;
     return (doc.status || "active") === statusFilter;
@@ -5778,6 +5875,8 @@ async function searchObservations(options) {
       source: doc.source || "agent",
       sourceDetail: doc.sourceDetail || void 0,
       valueCategory: doc.valueCategory || void 0,
+      admissionState: doc.admissionState || void 0,
+      visibility: doc.visibility || void 0,
       entityName: doc.entityName || void 0,
       documentType: doc.documentType || "observation",
       knowledgeLayer: doc.knowledgeLayer || "project-truth",
@@ -5821,6 +5920,12 @@ async function searchObservations(options) {
       score: isCommandStyleEntry(entry.title) ? entry.score * 0.3 : entry.score
     }));
   }
+  if (hasQuery) {
+    const qualifiedEntries = intermediate.filter(
+      (entry) => entry.admissionState !== "candidate" && entry.admissionState !== "ephemeral"
+    );
+    if (qualifiedEntries.length > 0) intermediate = qualifiedEntries;
+  }
   if (intentResult?.preferChronological) {
     intermediate.sort((a, b) => new Date(b.rawTime).getTime() - new Date(a.rawTime).getTime());
   } else {
@@ -5964,7 +6069,8 @@ async function searchObservations(options) {
   }
   let entries = intermediate.map(({ rawTime: _, _isCommandLog: _c, ...rest }) => rest);
   for (const hit of results.hits) {
-    rememberObservationDoc(hit.document);
+    const doc = hit.document;
+    if (canReadObservation(doc, options.reader)) rememberObservationDoc(doc);
   }
   if (hasQuery && originalQuery) {
     const queryLower = originalQuery.toLowerCase();
@@ -6008,7 +6114,8 @@ async function searchObservations(options) {
     entries = applyTokenBudget(entries, options.maxTokens);
   }
   if (options.trackAccess !== false) {
-    const hitDocs = results.hits.map((h) => ({ id: h.id, doc: h.document }));
+    const returnedKeys = new Set(entries.map((entry) => makeEntryKey(entry.projectId, entry.id)));
+    const hitDocs = results.hits.map((hit) => ({ id: hit.id, doc: hit.document })).filter(({ doc }) => returnedKeys.has(makeEntryKey(doc.projectId, doc.observationId)));
     recordAccessBatch(hitDocs).catch(() => {
     });
   }
@@ -6040,11 +6147,11 @@ async function getObservationsByIds(ids, projectId) {
   }
   return results;
 }
-async function getTimeline(anchorId, projectId, depthBefore = 3, depthAfter = 3) {
+async function getTimeline(anchorId, projectId, depthBefore = 3, depthAfter = 3, reader) {
   const { withFreshIndex: withFreshIndex2 } = await Promise.resolve().then(() => (init_freshness(), freshness_exports));
   const { getAllObservations: getAllObservations2 } = await Promise.resolve().then(() => (init_observations(), observations_exports));
   const rawObs = await withFreshIndex2(() => getAllObservations2());
-  const allObs = projectId ? rawObs.filter((o) => o.projectId === projectId) : rawObs;
+  const allObs = (projectId ? rawObs.filter((o) => o.projectId === projectId) : rawObs).filter((observation) => canReadObservation(observation, reader));
   const sorted = allObs.sort((a, b) => a.createdAt.localeCompare(b.createdAt));
   const anchorIndex = sorted.findIndex((o) => o.id === anchorId);
   if (anchorIndex === -1) {
@@ -6061,7 +6168,9 @@ async function getTimeline(anchorId, projectId, depthBefore = 3, depthAfter = 3)
       tokens: obs.tokens,
       source: obs.source || void 0,
       sourceDetail: obs.sourceDetail || void 0,
-      valueCategory: obs.valueCategory || void 0
+      valueCategory: obs.valueCategory || void 0,
+      admissionState: obs.admissionState || void 0,
+      visibility: obs.visibility || void 0
     };
   };
   const before = sorted.slice(Math.max(0, anchorIndex - depthBefore), anchorIndex).map(toIndexEntry);
@@ -6129,6 +6238,7 @@ var init_orama_store = __esm({
     init_esm_shims();
     init_types();
     init_mini_skills();
+    init_visibility();
     init_provider();
     init_project_affinity();
     init_intent_detector();
@@ -6185,6 +6295,10 @@ function obsToRow(obs) {
     relatedEntities: obs.relatedEntities ? JSON.stringify(obs.relatedEntities) : null,
     sourceDetail: obs.sourceDetail ?? null,
     valueCategory: obs.valueCategory ?? null,
+    admissionState: obs.admissionState ?? null,
+    admissionReason: obs.admissionReason ?? null,
+    visibility: obs.visibility ?? null,
+    sharedWithAgentIds: obs.sharedWithAgentIds ? JSON.stringify(obs.sharedWithAgentIds) : null,
     createdByAgentId: obs.createdByAgentId ?? null,
     writeGeneration: obs.writeGeneration ?? 0
   };
@@ -6215,6 +6329,10 @@ function rowToObs(row) {
     ...row.relatedEntities ? { relatedEntities: safeJsonParse3(row.relatedEntities, []) } : {},
     ...row.sourceDetail ? { sourceDetail: row.sourceDetail } : {},
     ...row.valueCategory ? { valueCategory: row.valueCategory } : {},
+    ...row.admissionState ? { admissionState: row.admissionState } : {},
+    ...row.admissionReason ? { admissionReason: row.admissionReason } : {},
+    ...row.visibility ? { visibility: row.visibility } : {},
+    ...row.sharedWithAgentIds ? { sharedWithAgentIds: safeJsonParse3(row.sharedWithAgentIds, []) } : {},
     ...row.createdByAgentId ? { createdByAgentId: row.createdByAgentId } : {},
     ...row.writeGeneration ? { writeGeneration: row.writeGeneration } : {}
   };
@@ -6266,12 +6384,14 @@ var init_sqlite_store = __esm({
         (id, entityName, type, title, narrative, facts, filesModified, concepts, tokens,
          createdAt, updatedAt, projectId, hasCausalLanguage, topicKey, revisionCount,
          sessionId, status, progress, source, commitHash, relatedCommits, relatedEntities,
-         sourceDetail, valueCategory, createdByAgentId, writeGeneration)
+         sourceDetail, valueCategory, admissionState, admissionReason, visibility, sharedWithAgentIds,
+         createdByAgentId, writeGeneration)
       VALUES
         (@id, @entityName, @type, @title, @narrative, @facts, @filesModified, @concepts, @tokens,
          @createdAt, @updatedAt, @projectId, @hasCausalLanguage, @topicKey, @revisionCount,
          @sessionId, @status, @progress, @source, @commitHash, @relatedCommits, @relatedEntities,
-         @sourceDetail, @valueCategory, @createdByAgentId, @writeGeneration)
+         @sourceDetail, @valueCategory, @admissionState, @admissionReason, @visibility, @sharedWithAgentIds,
+         @createdByAgentId, @writeGeneration)
     `);
         this.stmtUpdate = this.stmtInsert;
         this.stmtSetStatus = this.db.prepare(`UPDATE observations SET status = ? WHERE id = ?`);
@@ -6823,6 +6943,7 @@ var init_maintenance_jobs = __esm({
       "retention-archive",
       "consolidation",
       "codegraph-refresh",
+      "observation-qualify",
       "claim-derive",
       "claim-requalification",
       "knowledge-compile",
@@ -7181,7 +7302,8 @@ __export(lifecycle_exports, {
   enqueueClaimDerivation: () => enqueueClaimDerivation,
   enqueueClaimRequalification: () => enqueueClaimRequalification,
   enqueueCodegraphRefresh: () => enqueueCodegraphRefresh,
-  enqueueKnowledgeFollowups: () => enqueueKnowledgeFollowups
+  enqueueKnowledgeFollowups: () => enqueueKnowledgeFollowups,
+  enqueueObservationQualification: () => enqueueObservationQualification
 });
 function queueFor(input) {
   return input.queue ?? new MaintenanceJobStore(input.dataDir);
@@ -7216,6 +7338,14 @@ function enqueueClaimDerivation(input) {
     payload: { observationId: input.observationId }
   });
 }
+function enqueueObservationQualification(input) {
+  queueFor(input).enqueue({
+    projectId: input.projectId,
+    kind: "observation-qualify",
+    dedupeKey: "observation-qualify",
+    payload: { source: input.source, limit: 100 }
+  });
+}
 function enqueueKnowledgeFollowups(input) {
   const queue = queueFor(input);
   const payload = {
@@ -8080,6 +8210,7 @@ __export(observations_exports, {
   resolveObservations: () => resolveObservations,
   storeObservation: () => storeObservation,
   suggestTopicKey: () => suggestTopicKey,
+  updateObservationAdmission: () => updateObservationAdmission,
   withFreshObservations: () => withFreshObservations
 });
 function logEmbeddingFailureOnce(key, message) {
@@ -8146,6 +8277,18 @@ function queueClaimDerivation(observation) {
   } catch {
   }
 }
+function queueObservationQualification(observation) {
+  const dataDir = projectDir;
+  if (!dataDir || observation.admissionState !== "candidate") return;
+  try {
+    enqueueObservationQualification({
+      dataDir,
+      projectId: observation.projectId,
+      source: "automatic-capture:" + observation.id
+    });
+  } catch {
+  }
+}
 function isVectorCompatibleWithCurrentIndex(embedding) {
   if (!embedding) return false;
   const vectorDimensions = getVectorDimensions();
@@ -8201,6 +8344,9 @@ async function storeObservation(input) {
       (o) => o.topicKey === input.topicKey && o.projectId === input.projectId
     );
     if (existing) {
+      if (input.visibilityReader && !canManageObservation(existing, input.visibilityReader)) {
+        throw new Error("Cannot update a memory outside this session's write scope.");
+      }
       return { observation: await upsertObservation(existing, input, now3), upserted: true };
     }
   }
@@ -8237,6 +8383,9 @@ async function storeObservation(input) {
         if (input.topicKey) {
           const diskExisting = await tx.findByTopicKey(input.projectId, input.topicKey);
           if (diskExisting) {
+            if (input.visibilityReader && !canManageObservation(diskExisting, input.visibilityReader)) {
+              throw new Error("Cannot update a memory outside this session's write scope.");
+            }
             upsertedInsideLock = true;
             observation = diskExisting;
             return;
@@ -8267,6 +8416,10 @@ async function storeObservation(input) {
           relatedEntities: input.relatedEntities,
           sourceDetail: input.sourceDetail,
           valueCategory: input.valueCategory,
+          admissionState: input.admissionState,
+          admissionReason: input.admissionReason ? sanitizeCredentials(input.admissionReason) : void 0,
+          visibility: input.visibility ?? "project",
+          sharedWithAgentIds: input.sharedWithAgentIds,
           createdByAgentId: input.createdByAgentId,
           // Predict the generation that atomic() will commit after this callback.
           // bumpGeneration() runs after fn(tx) returns, incrementing by 1.
@@ -8313,6 +8466,10 @@ async function storeObservation(input) {
         relatedEntities: input.relatedEntities,
         sourceDetail: input.sourceDetail,
         valueCategory: input.valueCategory,
+        admissionState: input.admissionState,
+        admissionReason: input.admissionReason ? sanitizeCredentials(input.admissionReason) : void 0,
+        visibility: input.visibility ?? "project",
+        sharedWithAgentIds: input.sharedWithAgentIds,
         createdByAgentId: input.createdByAgentId,
         writeGeneration: 0
       };
@@ -8336,7 +8493,12 @@ async function storeObservation(input) {
       status: "active",
       source: input.source ?? "agent",
       sourceDetail: input.sourceDetail ?? "",
-      valueCategory: input.valueCategory ?? ""
+      valueCategory: input.valueCategory ?? "",
+      admissionState: input.admissionState ?? "",
+      admissionReason: input.admissionReason ? sanitizeCredentials(input.admissionReason) : "",
+      visibility: input.visibility ?? "project",
+      createdByAgentId: input.createdByAgentId ?? "",
+      sharedWithAgentIds: JSON.stringify(input.sharedWithAgentIds ?? [])
     };
     await insertObservation(doc);
   };
@@ -8345,7 +8507,10 @@ async function storeObservation(input) {
     return { observation: await upsertObservation(observation, input, now3), upserted: true };
   }
   await bindObservationCodeRefsBestEffort(observation);
-  queueClaimDerivation(observation);
+  queueObservationQualification(observation);
+  if (resolveObservationVisibility(observation) === "project") {
+    queueClaimDerivation(observation);
+  }
   const obsId = observation.id;
   vectorMissingIds.add(obsId);
   const searchableText = [input.title, input.narrative, ...input.facts ?? []].join(" ");
@@ -8418,6 +8583,10 @@ async function upsertObservation(existing, input, now3) {
   if (input.progress) existing.progress = input.progress;
   if (input.sourceDetail !== void 0) existing.sourceDetail = input.sourceDetail;
   if (input.valueCategory !== void 0) existing.valueCategory = input.valueCategory;
+  if (input.admissionState !== void 0) existing.admissionState = input.admissionState;
+  if (input.admissionReason !== void 0) existing.admissionReason = sanitizeCredentials(input.admissionReason);
+  if (input.visibility !== void 0) existing.visibility = input.visibility;
+  if (input.sharedWithAgentIds !== void 0) existing.sharedWithAgentIds = input.sharedWithAgentIds;
   const doc = {
     id: makeOramaObservationId(existing.projectId, existing.id),
     observationId: existing.id,
@@ -8436,7 +8605,12 @@ async function upsertObservation(existing, input, now3) {
     status: "active",
     source: existing.source ?? "agent",
     sourceDetail: existing.sourceDetail ?? "",
-    valueCategory: existing.valueCategory ?? ""
+    valueCategory: existing.valueCategory ?? "",
+    admissionState: existing.admissionState ?? "",
+    admissionReason: existing.admissionReason ?? "",
+    visibility: existing.visibility ?? "project",
+    createdByAgentId: existing.createdByAgentId ?? "",
+    sharedWithAgentIds: JSON.stringify(existing.sharedWithAgentIds ?? [])
   };
   const oramaId = makeOramaObservationId(existing.projectId, existing.id);
   try {
@@ -8459,7 +8633,10 @@ async function upsertObservation(existing, input, now3) {
     await store.update(existing);
   }
   await bindObservationCodeRefsBestEffort(existing);
-  queueClaimDerivation(existing);
+  queueObservationQualification(existing);
+  if (resolveObservationVisibility(existing) === "project") {
+    queueClaimDerivation(existing);
+  }
   const searchableText = [input.title, input.narrative, ...input.facts ?? []].join(" ");
   const obsId = existing.id;
   vectorMissingIds.add(obsId);
@@ -8498,6 +8675,56 @@ async function upsertObservation(existing, input, now3) {
 function getObservation(id, projectId) {
   return observations.find((o) => o.id === id && (projectId ? o.projectId === projectId : true));
 }
+async function updateObservationAdmission(input) {
+  await ensureFreshObservations();
+  const cached = observations.find(
+    (observation) => observation.id === input.observationId && (!input.projectId || observation.projectId === input.projectId)
+  );
+  if (!cached) return void 0;
+  const now3 = (/* @__PURE__ */ new Date()).toISOString();
+  const admissionReason = sanitizeCredentials(input.admissionReason).slice(0, 240);
+  const apply = (current) => {
+    if (input.projectId && current.projectId !== input.projectId) return void 0;
+    if (input.expectedState && current.admissionState !== input.expectedState) return void 0;
+    return {
+      ...current,
+      admissionState: input.admissionState,
+      admissionReason,
+      ...input.visibility !== void 0 ? { visibility: input.visibility } : {},
+      updatedAt: now3
+    };
+  };
+  let updated;
+  if (projectDir) {
+    const store = getObservationStore();
+    await store.atomic(async (tx) => {
+      const current = await tx.getById(input.observationId);
+      if (!current) return;
+      const next = apply(current);
+      if (!next) return;
+      await tx.update(next);
+      updated = next;
+    });
+  } else {
+    updated = apply(cached);
+  }
+  if (!updated) return void 0;
+  observations = observations.map(
+    (observation) => observation.id === updated.id && observation.projectId === updated.projectId ? updated : observation
+  );
+  try {
+    await updateObservationMetadata(updated.projectId, updated.id, {
+      admissionState: updated.admissionState,
+      admissionReason: updated.admissionReason,
+      ...updated.visibility !== void 0 ? { visibility: updated.visibility } : {}
+    });
+  } catch {
+  }
+  if (updated.admissionState === "qualified" && resolveObservationVisibility(updated) === "project") {
+    queueClaimDerivation(updated);
+  }
+  return updated;
+}
 async function resolveObservations(ids, status = "resolved") {
   const resolved = [];
   const notFound = [];
@@ -8537,7 +8764,12 @@ async function resolveObservations(ids, status = "resolved") {
         status,
         source: obs.source ?? "agent",
         sourceDetail: obs.sourceDetail ?? "",
-        valueCategory: obs.valueCategory ?? ""
+        valueCategory: obs.valueCategory ?? "",
+        admissionState: obs.admissionState ?? "",
+        admissionReason: obs.admissionReason ?? "",
+        visibility: obs.visibility ?? "project",
+        createdByAgentId: obs.createdByAgentId ?? "",
+        sharedWithAgentIds: JSON.stringify(obs.sharedWithAgentIds ?? [])
       };
       await insertObservation(doc);
       const obsId = obs.id;
@@ -8667,6 +8899,11 @@ async function reindexObservations() {
         source: obs.source ?? "agent",
         sourceDetail: obs.sourceDetail ?? "",
         valueCategory: obs.valueCategory ?? "",
+        admissionState: obs.admissionState ?? "",
+        admissionReason: obs.admissionReason ?? "",
+        visibility: obs.visibility ?? "project",
+        createdByAgentId: obs.createdByAgentId ?? "",
+        sharedWithAgentIds: JSON.stringify(obs.sharedWithAgentIds ?? []),
         ...compatibleEmbedding ? { embedding: compatibleEmbedding } : {}
       };
       await insertObservation(doc);
@@ -8739,6 +8976,7 @@ async function probeSearchIndex(projectId) {
   await searchObservations({
     query: "semantic memory retrieval status",
     projectId,
+    reader: { projectId },
     limit: 1,
     status: "all",
     trackAccess: false
@@ -8804,6 +9042,11 @@ async function backfillVectorEmbeddings(options = {}) {
             source: obs.source ?? "agent",
             sourceDetail: obs.sourceDetail ?? "",
             valueCategory: obs.valueCategory ?? "",
+            admissionState: obs.admissionState ?? "",
+            admissionReason: obs.admissionReason ?? "",
+            visibility: obs.visibility ?? "project",
+            createdByAgentId: obs.createdByAgentId ?? "",
+            sharedWithAgentIds: JSON.stringify(obs.sharedWithAgentIds ?? []),
             embedding
           };
           await insertObservation(doc);
@@ -8845,6 +9088,7 @@ var init_observations = __esm({
     init_provider();
     init_secret_filter();
     init_lifecycle();
+    init_visibility();
     observations = [];
     nextId = 1;
     projectDir = null;
@@ -9124,8 +9368,9 @@ function resolveSourceDetail(sourceDetail, source) {
   return void 0;
 }
 function classifyLayer(fields) {
-  const { valueCategory } = fields;
+  const { valueCategory, admissionState } = fields;
   const sd = resolveSourceDetail(fields.sourceDetail, fields.source);
+  if (admissionState === "candidate" || admissionState === "ephemeral") return "L1";
   if (valueCategory === "core") return "L2";
   if (sd === "hook") return "L1";
   if (sd === "git-ingest") return "L3";
@@ -9183,6 +9428,7 @@ function getEffectiveRetentionDays(doc) {
 }
 function isImmune(doc) {
   if (doc.type === "probe") return false;
+  if (doc.admissionState === "candidate" || doc.admissionState === "ephemeral") return false;
   if (doc.valueCategory === "core") return true;
   const importance = getImportanceLevel(doc);
   if (importance === "critical") return true;
@@ -9192,6 +9438,7 @@ function isImmune(doc) {
 }
 function getImmunityReason(doc) {
   if (doc.type === "probe") return null;
+  if (doc.admissionState === "candidate" || doc.admissionState === "ephemeral") return null;
   if (doc.valueCategory === "core") return "core valueCategory (formation-classified)";
   const importance = getImportanceLevel(doc);
   if (importance === "critical") return "critical importance";
@@ -9324,7 +9571,9 @@ function toRetentionDocument(obs, accessMap) {
     status: obs.status ?? "active",
     source: obs.source ?? "agent",
     sourceDetail: obs.sourceDetail ?? "",
-    valueCategory: obs.valueCategory ?? ""
+    valueCategory: obs.valueCategory ?? "",
+    admissionState: obs.admissionState ?? "",
+    admissionReason: obs.admissionReason ?? ""
   };
 }
 async function archiveExpiredBatch(_projectDir, options) {
@@ -9338,7 +9587,7 @@ async function archiveExpiredBatch(_projectDir, options) {
   });
   const hasMore = page.length > limit;
   const scanned = hasMore ? page.slice(0, limit) : page;
-  const candidateIds = scanned.filter((observation) => getRetentionZone(
+  const candidateIds = scanned.filter((observation) => !options.reader || canManageObservation(observation, options.reader)).filter((observation) => getRetentionZone(
     toRetentionDocument(observation, options.accessMap),
     options.referenceTime
   ) === "archive-candidate").map((observation) => observation.id);
@@ -9351,7 +9600,7 @@ async function archiveExpiredBatch(_projectDir, options) {
   const nextCursor = hasMore && scanned.length > 0 ? scanned[scanned.length - 1].id : void 0;
   return nextCursor === void 0 ? { archived, scanned: scanned.length } : { archived, scanned: scanned.length, nextCursor };
 }
-async function archiveExpired(projectDir2, referenceTime, accessMap, projectId) {
+async function archiveExpired(projectDir2, referenceTime, accessMap, projectId, reader) {
   const store = getObservationStore();
   if (projectId) {
     let afterId;
@@ -9361,12 +9610,14 @@ async function archiveExpired(projectDir2, referenceTime, accessMap, projectId)
         projectId,
         afterId,
         referenceTime,
-        accessMap
+        accessMap,
+        reader
       });
       archived += batch.archived;
       afterId = batch.nextCursor;
     } while (afterId !== void 0);
-    const remaining = await store.countByProject(projectId, { status: "active" });
+    const remainingObservations = await store.loadByProject(projectId, { status: "active" });
+    const remaining = reader ? remainingObservations.filter((observation) => canManageObservation(observation, reader)).length : remainingObservations.length;
     return { archived, remaining };
   }
   return await store.atomic(async (tx) => {
@@ -9396,6 +9647,7 @@ var init_retention = __esm({
     "use strict";
     init_esm_shims();
     init_obs_store();
+    init_visibility();
     RETENTION_DAYS = {
       critical: 365,
       high: 180,
@@ -9431,6 +9683,49 @@ var init_retention = __esm({
   }
 });
 
+// src/memory/admission.ts
+var admission_exports = {};
+__export(admission_exports, {
+  isCandidateObservation: () => isCandidateObservation,
+  isEligibleForAutomaticDelivery: () => isEligibleForAutomaticDelivery,
+  isEligibleForKnowledgePromotion: () => isEligibleForKnowledgePromotion,
+  qualifyCandidateFromCurrentCode: () => qualifyCandidateFromCurrentCode
+});
+function isEligibleForAutomaticDelivery(observation) {
+  return observation.admissionState !== "ephemeral" && observation.admissionState !== "candidate";
+}
+function isCandidateObservation(observation) {
+  return observation.admissionState === "candidate";
+}
+function isEligibleForKnowledgePromotion(observation) {
+  return isEligibleForAutomaticDelivery(observation) && observation.valueCategory !== "ephemeral" && resolveObservationVisibility(observation) === "project";
+}
+function qualifyCandidateFromCurrentCode(input) {
+  if (!isCandidateObservation(input.observation)) return void 0;
+  if (input.observation.valueCategory === "ephemeral") return void 0;
+  if (input.currentCodeReferenceCount <= 0) return void 0;
+  const typeLabel = DURABLE_AUTOMATIC_TYPES.has(input.observation.type) ? "high-value automatic record" : "automatic record";
+  return {
+    admissionState: "qualified",
+    admissionReason: `${typeLabel} qualified against ${input.currentCodeReferenceCount} current Code Memory reference(s)`
+  };
+}
+var DURABLE_AUTOMATIC_TYPES;
+var init_admission = __esm({
+  "src/memory/admission.ts"() {
+    "use strict";
+    init_esm_shims();
+    init_visibility();
+    DURABLE_AUTOMATIC_TYPES = /* @__PURE__ */ new Set([
+      "decision",
+      "gotcha",
+      "problem-solution",
+      "trade-off",
+      "why-it-exists"
+    ]);
+  }
+});
+
 // src/workspace/workflow-sync.ts
 import matter9 from "gray-matter";
 var WorkflowSyncer;
@@ -10831,6 +11126,7 @@ var init_isolated_maintenance = __esm({
       "retention-archive",
       "consolidation",
       "codegraph-refresh",
+      "observation-qualify",
       "claim-derive",
       "claim-requalification",
       "knowledge-compile",
@@ -11266,9 +11562,10 @@ async function loadConsolidationPage(projectId, options) {
   return hasMore && observations2.length > 0 ? { observations: observations2, nextCursor: observations2[observations2.length - 1].id } : { observations: observations2 };
 }
 function findClusters(observations2, threshold) {
-  if (observations2.length < MIN_CLUSTER_SIZE) return [];
+  const eligible = observations2.filter(isEligibleForAutomaticDelivery).filter((observation) => resolveObservationVisibility(observation) === "project");
+  if (eligible.length < MIN_CLUSTER_SIZE) return [];
   const groups = /* @__PURE__ */ new Map();
-  for (const obs of observations2) {
+  for (const obs of eligible) {
     const key = `${obs.entityName}::${obs.type}`;
     const group = groups.get(key) ?? [];
     group.push(obs);
@@ -11405,6 +11702,8 @@ var init_consolidation = __esm({
     "use strict";
     init_esm_shims();
     init_obs_store();
+    init_admission();
+    init_visibility();
     DEFAULT_SIMILARITY_THRESHOLD = 0.45;
     HIGH_VALUE_SIMILARITY_THRESHOLD = 0.85;
     HIGH_VALUE_TYPES = /* @__PURE__ */ new Set(["gotcha", "decision", "trade-off", "reasoning", "problem-solution"]);
@@ -14423,6 +14722,15 @@ function claimDerivationCursor(payload) {
   const value = payload.cursor;
   return typeof value === "number" && Number.isFinite(value) ? Math.max(0, Math.floor(value)) : 0;
 }
+function observationQualificationBatchSize(payload) {
+  const value = payload.limit;
+  if (typeof value !== "number" || !Number.isFinite(value)) return DEFAULT_OBSERVATION_QUALIFICATION_BATCH_SIZE;
+  return Math.min(500, Math.max(1, Math.floor(value)));
+}
+function observationQualificationCursor(payload) {
+  const value = payload.cursor;
+  return typeof value === "number" && Number.isFinite(value) ? Math.max(0, Math.floor(value)) : 0;
+}
 function observationId(payload) {
   const value = payload.observationId;
   return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : void 0;
@@ -14601,6 +14909,71 @@ function createProjectMaintenanceHandler(projectId, projectDir2, projectRoot, op
         ...snapshot?.id ? { snapshotId: snapshot.id } : {},
         ...options.maintenanceQueue ? { queue: options.maintenanceQueue } : {}
       });
+      enqueueObservationQualification({
+        projectId,
+        dataDir: projectDir2,
+        source: "codegraph-refresh",
+        ...options.maintenanceQueue ? { queue: options.maintenanceQueue } : {}
+      });
+      return { action: "complete" };
+    }
+    if (job.kind === "observation-qualify") {
+      const [
+        { CodeGraphStore: CodeGraphStore2 },
+        { bindObservationToCode: bindObservationToCode2 },
+        { getObservationStore: getObservationStore2 },
+        { qualifyCandidateFromCurrentCode: qualifyCandidateFromCurrentCode2 },
+        { updateObservationAdmission: updateObservationAdmission2 }
+      ] = await Promise.all([
+        Promise.resolve().then(() => (init_store(), store_exports)),
+        Promise.resolve().then(() => (init_binder(), binder_exports)),
+        Promise.resolve().then(() => (init_obs_store(), obs_store_exports)),
+        Promise.resolve().then(() => (init_admission(), admission_exports)),
+        Promise.resolve().then(() => (init_observations(), observations_exports))
+      ]);
+      const codeStore = new CodeGraphStore2();
+      await codeStore.init(projectDir2);
+      const limit = observationQualificationBatchSize(job.payload);
+      const page = await getObservationStore2().loadByProject(projectId, {
+        status: "active",
+        afterId: observationQualificationCursor(job.payload),
+        limit: limit + 1
+      });
+      const hasMore = page.length > limit;
+      const observations2 = hasMore ? page.slice(0, limit) : page;
+      const indexedAtMs = Date.parse(codeStore.status(projectId).indexedAt ?? "");
+      for (const observation of observations2) {
+        if (observation.admissionState !== "candidate") continue;
+        if (!Number.isFinite(indexedAtMs) || indexedAtMs < Date.parse(observation.createdAt)) continue;
+        await bindObservationToCode2(codeStore, observation);
+        const currentCodeReferenceCount = codeStore.listObservationRefs(projectId, observation.id).filter((reference) => reference.status === "current").length;
+        const qualification = qualifyCandidateFromCurrentCode2({
+          observation,
+          currentCodeReferenceCount
+        });
+        if (!qualification) continue;
+        await updateObservationAdmission2({
+          observationId: observation.id,
+          projectId,
+          expectedState: "candidate",
+          // Automatic capture earns project visibility only after a current
+          // Code Memory link exists. Explicit/private records retain scope.
+          ...observation.sourceDetail === "hook" ? { visibility: "project" } : {},
+          ...qualification
+        });
+      }
+      if (hasMore && observations2.length > 0) {
+        return {
+          action: "reschedule",
+          delayMs: 0,
+          resetAttempts: true,
+          payload: {
+            ...job.payload,
+            cursor: observations2[observations2.length - 1].id,
+            limit
+          }
+        };
+      }
       return { action: "complete" };
     }
     if (job.kind === "claim-derive") {
@@ -14766,7 +15139,7 @@ function createProjectMaintenanceDispatcher(projectId, projectDir2, projectRoot,
     return isolatedRunner({ job, projectRoot, dataDir: projectDir2 });
   };
 }
-var DEFAULT_VECTOR_BATCH_SIZE, DEFAULT_RETENTION_BATCH_SIZE, DEFAULT_CONSOLIDATION_BATCH_SIZE, DEFAULT_CODEGRAPH_MAX_FILES, DEFAULT_CLAIM_DERIVATION_BATCH_SIZE, VECTOR_RETRY_DELAY_MS, DEDUP_PER_PAIR_TIMEOUT_MS;
+var DEFAULT_VECTOR_BATCH_SIZE, DEFAULT_RETENTION_BATCH_SIZE, DEFAULT_CONSOLIDATION_BATCH_SIZE, DEFAULT_CODEGRAPH_MAX_FILES, DEFAULT_CLAIM_DERIVATION_BATCH_SIZE, DEFAULT_OBSERVATION_QUALIFICATION_BATCH_SIZE, VECTOR_RETRY_DELAY_MS, DEDUP_PER_PAIR_TIMEOUT_MS;
 var init_project_maintenance = __esm({
   "src/runtime/project-maintenance.ts"() {
     "use strict";
@@ -14778,6 +15151,7 @@ var init_project_maintenance = __esm({
     DEFAULT_CONSOLIDATION_BATCH_SIZE = 200;
     DEFAULT_CODEGRAPH_MAX_FILES = 5e3;
     DEFAULT_CLAIM_DERIVATION_BATCH_SIZE = 100;
+    DEFAULT_OBSERVATION_QUALIFICATION_BATCH_SIZE = 100;
     VECTOR_RETRY_DELAY_MS = 5e3;
     DEDUP_PER_PAIR_TIMEOUT_MS = 5e3;
   }
@@ -14968,7 +15342,7 @@ async function startSession(projectDir2, projectId, opts) {
     status: "active",
     agent: opts?.agent
   };
-  const previousContext = await getSessionContext(projectDir2, projectId);
+  const previousContext = await getSessionContext(projectDir2, projectId, 3, opts?.reader);
   const sessionStore = getSessionStore();
   const aliasSet = await resolveProjectIds(projectId);
   await sessionStore.atomicRolloverInsert(session, [...aliasSet], now3);
@@ -14986,23 +15360,27 @@ async function endSession(projectDir2, sessionId, summary) {
   await sessionStore.update(session);
   return session;
 }
-async function getSessionContext(projectDir2, projectId, limit = 3) {
+async function getSessionContext(projectDir2, projectId, limit = 3, reader) {
   const aliasSet = await resolveProjectIds(projectId);
   const [sessions, allObs] = await Promise.all([
     loadAliasSessions(aliasSet),
     loadAliasActiveObservations(aliasSet)
   ]);
+  const readableObs = reader ? allObs.filter((observation) => {
+    const observationReader = reader.projectId && aliasSet.has(observation.projectId) ? { ...reader, projectId: observation.projectId } : reader;
+    return canReadObservation(observation, observationReader);
+  }) : allObs;
   const isNoisySummary = (summary) => {
     if (!summary) return false;
     return NOISE_PATTERNS2.some((p) => p.test(summary)) || SYSTEM_SELF_PATTERNS.some((p) => p.test(summary));
   };
   const projectSessions = sessions.filter((session) => session.status === "completed").filter((session) => !isNoisySummary(session.summary)).sort((a, b) => new Date(b.endedAt || b.startedAt).getTime() - new Date(a.endedAt || a.startedAt).getTime()).slice(0, limit);
-  if (projectSessions.length === 0 && allObs.length === 0) {
+  if (projectSessions.length === 0 && readableObs.length === 0) {
     return "";
   }
   const lines = [];
   const projectTokens = tokenizeProjectId(projectId);
-  const projectObs = allObs.filter((obs) => !isNoiseObservation(obs) && !isSystemSelfObservation(obs));
+  const projectObs = readableObs.filter((obs) => !isNoiseObservation(obs) && !isSystemSelfObservation(obs));
   const l2Scored = projectObs.filter((obs) => PRIORITY_TYPES.has(obs.type) && classifyLayer(obs) === "L2").map((obs) => ({ obs, score: scoreObservationForSessionContext(obs, projectTokens) })).sort((a, b) => {
     if (b.score !== a.score) return b.score - a.score;
     return new Date(b.obs.createdAt).getTime() - new Date(a.obs.createdAt).getTime();
@@ -15019,16 +15397,16 @@ async function getSessionContext(projectDir2, projectId, limit = 3) {
       return true;
     });
   })() : l2Scored).slice(0, 5).map(({ obs }) => obs);
-  const l1HookObs = projectObs.filter((obs) => classifyLayer(obs) === "L1").sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime()).slice(0, 3);
+  const l1HookObs = projectObs.filter((obs) => isEligibleForAutomaticDelivery(obs) && classifyLayer(obs) === "L1").sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime()).slice(0, 3);
   const l3GitCount = projectObs.filter((obs) => classifyLayer(obs) === "L3").length;
-  const totalHookCount = projectObs.filter((obs) => classifyLayer(obs) === "L1").length;
+  const totalHookCount = projectObs.filter((obs) => isEligibleForAutomaticDelivery(obs) && classifyLayer(obs) === "L1").length;
   const activeEntities = [
     ...new Set(l2Obs.map((o) => o.entityName).filter((n) => !!n && n.trim().length > 0))
   ].slice(0, 5);
   const hasL1Content = l1HookObs.length > 0 || l3GitCount > 0;
   if (hasL1Content) {
     let graphNeighbors = [];
-    if (activeEntities.length > 0) {
+    if (!reader && activeEntities.length > 0) {
       try {
         const graphMgr = new KnowledgeGraphManager(projectDir2);
         await graphMgr.init();
@@ -15147,12 +15525,14 @@ var init_session = __esm({
   "src/memory/session.ts"() {
     "use strict";
     init_esm_shims();
+    init_admission();
     init_disclosure_policy();
     init_aliases();
     init_obs_store();
     init_session_store();
     init_graph();
     init_secret_filter();
+    init_visibility();
     PRIORITY_TYPES = /* @__PURE__ */ new Set(["gotcha", "decision", "problem-solution", "trade-off", "discovery"]);
     TYPE_EMOJI = {
       "gotcha": "[DISCOVERY]",
@@ -15299,27 +15679,80 @@ function workflowOutput(selection) {
     cautions: selection.cautions.map((caution) => short(caution, 22))
   };
 }
-function appendLine(lines, candidate, maxTokens, omitted, omittedKind) {
+function appendLine(lines, candidate, maxTokens, omitted, omittedKind, selected, receiptSelection) {
   const next = lines.length ? lines.join("\n") + "\n" + candidate : candidate;
   if (countTextTokens(next) <= maxTokens) {
     lines.push(candidate);
+    if (receiptSelection) selected?.push(receiptSelection);
     return true;
   }
   omitted.push(omittedKind);
   return false;
 }
+function freshnessForMemory(status) {
+  if (status === "current" || status === "suspect" || status === "stale") return status;
+  return "unknown";
+}
+function receiptOmissionKind(raw) {
+  if (raw.includes("task")) return "task";
+  if (raw.includes("fact")) return "current-fact";
+  if (raw.includes("state")) return "code-state";
+  if (raw.includes("semantic")) return "semantic-code";
+  if (raw.includes("start")) return "start-here";
+  if (raw.includes("memory")) return "memory";
+  if (raw.includes("claim")) return "claim";
+  if (raw.includes("knowledge-page")) return "knowledge-page";
+  if (raw.includes("workflow")) return "workflow";
+  if (raw.includes("verification")) return "verification";
+  if (raw.includes("caution")) return "caution";
+  return void 0;
+}
+function receiptOmissions(omitted, hiddenCautionMemoryCount) {
+  const counts = /* @__PURE__ */ new Map();
+  for (const raw of omitted) {
+    const kind = receiptOmissionKind(raw);
+    if (!kind || raw.endsWith("-heading")) continue;
+    counts.set(kind, (counts.get(kind) ?? 0) + 1);
+  }
+  const receipt = [...counts.entries()].map(([kind, count2]) => ({
+    kind,
+    reason: "token-budget",
+    count: count2
+  }));
+  if (hiddenCautionMemoryCount > 0) {
+    receipt.push({
+      kind: "caution",
+      reason: "hidden-by-task-lens",
+      count: hiddenCautionMemoryCount
+    });
+  }
+  return receipt;
+}
+function scheduledActions(cautions) {
+  return cautions.filter((caution) => caution.kind === "codegraph-refresh-queued").map((caution) => short(caution.message, 28));
+}
 function renderTaskWorksetPrompt(input) {
   const maxTokens = input.budget?.maxTokens ?? 180;
   const omitted = [];
+  const selected = [];
   const lines = ["Memorix Autopilot Brief"];
   const task = short(input.task || "Continue the current task.", 34);
-  appendLine(lines, "Task: " + task, maxTokens, omitted, "task-detail");
+  appendLine(lines, "Task: " + task, maxTokens, omitted, "task-detail", selected, {
+    kind: "task",
+    reason: "current task supplied by the caller",
+    trust: "source-backed"
+  });
   appendLine(lines, "Task lens: " + input.lens, maxTokens, omitted, "lens");
   if (input.cautions.length > 0 || input.cautionMemory.length > 0) {
     appendLine(lines, "", maxTokens, omitted, "caution-heading");
     appendLine(lines, "Cautions", maxTokens, omitted, "caution-heading");
     for (const caution of input.cautions.slice(0, 6)) {
-      appendLine(lines, "- " + short(caution.message, 22), maxTokens, omitted, "caution");
+      appendLine(lines, "- " + short(caution.message, 22), maxTokens, omitted, "caution", selected, {
+        kind: "caution",
+        id: "caution:" + caution.kind,
+        reason: "current project caution",
+        trust: "source-backed"
+      });
     }
     for (const memory of input.cautionMemory.slice(0, 3)) {
       const location = memory.path ? memory.path + (memory.symbol ? "#" + memory.symbol : "") : "no current code location";
@@ -15329,7 +15762,15 @@ function renderTaskWorksetPrompt(input) {
         "- #" + memory.id + " " + memory.status + ": " + short(memory.title, 18) + " (" + location + reason + ")",
         maxTokens,
         omitted,
-        "caution-memory"
+        "caution-memory",
+        selected,
+        {
+          kind: "memory",
+          id: "memory:" + memory.id,
+          reason: "task-relevant memory requiring source verification",
+          freshness: freshnessForMemory(memory.status),
+          trust: "historical"
+        }
       );
     }
     if (input.hiddenCautionMemoryCount > 0) {
@@ -15340,13 +15781,22 @@ function renderTaskWorksetPrompt(input) {
     appendLine(lines, "", maxTokens, omitted, "facts-heading");
     appendLine(lines, "Current project facts", maxTokens, omitted, "facts-heading");
     for (const fact of input.currentFacts.slice(0, 4)) {
-      appendLine(lines, "- " + short(fact, 40), maxTokens, omitted, "current-fact");
+      appendLine(lines, "- " + short(fact, 40), maxTokens, omitted, "current-fact", selected, {
+        kind: "current-fact",
+        reason: "current project state",
+        trust: "source-backed"
+      });
     }
   }
   if (input.codeState) {
     appendLine(lines, "", maxTokens, omitted, "state-heading");
     appendLine(lines, "Project state", maxTokens, omitted, "state-heading");
-    appendLine(lines, input.codeState, maxTokens, omitted, "code-state");
+    appendLine(lines, input.codeState, maxTokens, omitted, "code-state", selected, {
+      kind: "code-state",
+      ...input.provenance.snapshotId ? { id: "snapshot:" + input.provenance.snapshotId } : {},
+      reason: "latest available Code State snapshot",
+      trust: "source-backed"
+    });
   }
   if (input.semanticCode && (input.semanticCode.entryPoints.length > 0 || input.semanticCode.relations.length > 0)) {
     appendLine(lines, "", maxTokens, omitted, "semantic-code-heading");
@@ -15358,7 +15808,14 @@ function renderTaskWorksetPrompt(input) {
         "- " + location + ": " + short(relation.from.name, 12) + " " + short(relation.kind, 8) + " " + short(relation.to.name, 12),
         maxTokens,
         omitted,
-        "semantic-relation"
+        "semantic-relation",
+        selected,
+        {
+          kind: "semantic-code",
+          id: "code:" + location,
+          reason: "validated optional semantic code relation",
+          trust: "derived"
+        }
       );
     }
     if (input.semanticCode.relations.length === 0) {
@@ -15369,7 +15826,14 @@ function renderTaskWorksetPrompt(input) {
           "- " + location + ": " + short(entry.name, 16) + " (" + short(entry.kind, 8) + ")",
           maxTokens,
           omitted,
-          "semantic-entry"
+          "semantic-entry",
+          selected,
+          {
+            kind: "semantic-code",
+            id: "code:" + location,
+            reason: "validated optional semantic code entry point",
+            trust: "derived"
+          }
         );
       }
     }
@@ -15378,7 +15842,12 @@ function renderTaskWorksetPrompt(input) {
     appendLine(lines, "", maxTokens, omitted, "start-heading");
     appendLine(lines, "Start here", maxTokens, omitted, "start-heading");
     for (const source of input.startHere.slice(0, 5)) {
-      appendLine(lines, "- " + source, maxTokens, omitted, "start-here");
+      appendLine(lines, "- " + source, maxTokens, omitted, "start-here", selected, {
+        kind: "start-here",
+        id: "path:" + source,
+        reason: "task-lensed starting point",
+        trust: "derived"
+      });
     }
   }
   if (input.reliableMemory.length > 0) {
@@ -15391,7 +15860,15 @@ function renderTaskWorksetPrompt(input) {
         "- #" + memory.id + " " + memory.type + ": " + short(memory.title, 18) + " (" + location + ")",
         maxTokens,
         omitted,
-        "reliable-memory"
+        "reliable-memory",
+        selected,
+        {
+          kind: "memory",
+          id: "memory:" + memory.id,
+          reason: "current code-bound memory",
+          freshness: freshnessForMemory(memory.status),
+          trust: "historical"
+        }
       );
     }
   }
@@ -15399,10 +15876,25 @@ function renderTaskWorksetPrompt(input) {
     appendLine(lines, "", maxTokens, omitted, "knowledge-heading");
     appendLine(lines, "Project knowledge", maxTokens, omitted, "knowledge-heading");
     for (const claim of input.claims.slice(0, 3)) {
-      appendLine(lines, "- " + claim.assertion + " [" + claim.id + "]", maxTokens, omitted, "claim");
+      appendLine(lines, "- " + claim.assertion + " [" + claim.id + "]", maxTokens, omitted, "claim", selected, {
+        kind: "claim",
+        id: "claim:" + claim.id,
+        reason: "source-qualified task match",
+        trust: "source-backed"
+      });
     }
     for (const page of input.pages.slice(0, 2)) {
-      appendLine(lines, "- page: " + page.relativePath, maxTokens, omitted, "knowledge-page");
+      const supportsDeliveredClaim = page.claimIds.some((claimId) => selected.some((item) => item.kind === "claim" && item.id === "claim:" + claimId));
+      if (!supportsDeliveredClaim) {
+        omitted.push("knowledge-page-dependency");
+        continue;
+      }
+      appendLine(lines, "- page: " + page.relativePath, maxTokens, omitted, "knowledge-page", selected, {
+        kind: "knowledge-page",
+        id: "page:" + page.id,
+        reason: "approved page linked to a selected claim",
+        trust: "source-backed"
+      });
     }
   }
   if (input.workflows.length > 0) {
@@ -15414,7 +15906,14 @@ function renderTaskWorksetPrompt(input) {
         "- " + workflow.title + ": " + workflow.firstPhase.title + " - " + workflow.firstPhase.instructions,
         maxTokens,
         omitted,
-        "workflow"
+        "workflow",
+        selected,
+        {
+          kind: "workflow",
+          id: "workflow:" + workflow.id,
+          reason: "task-matching project workflow",
+          trust: "source-backed"
+        }
       );
     }
   }
@@ -15422,16 +15921,23 @@ function renderTaskWorksetPrompt(input) {
     appendLine(lines, "", maxTokens, omitted, "verification-heading");
     appendLine(lines, "Verify", maxTokens, omitted, "verification-heading");
     for (const check of input.verification.slice(0, 4)) {
-      appendLine(lines, "- " + short(check, 20), maxTokens, omitted, "verification");
+      appendLine(lines, "- " + short(check, 20), maxTokens, omitted, "verification", selected, {
+        kind: "verification",
+        reason: "task-lensed verification guidance",
+        trust: "derived"
+      });
     }
   }
   return {
     prompt: lines.join("\n"),
     tokenCount: countTextTokens(lines.join("\n")),
-    omitted: unique(omitted)
+    omitted: unique(omitted),
+    omittedItems: omitted,
+    selected
   };
 }
 async function buildTaskWorkset(input) {
+  const startedAt = Date.now();
   const task = input.task?.trim() ?? "";
   const maxTokens = Math.max(96, Math.min(Math.floor(input.maxTokens ?? 180), 320));
   const cautions = [...input.runtimeCautions ?? [], ...snapshotCautions(input)];
@@ -15533,6 +16039,18 @@ async function buildTaskWorkset(input) {
     ...base,
     budget: { maxTokens }
   });
+  const receipt = {
+    version: "1.2.2",
+    target: input.deliveryTarget ?? "project-context",
+    elapsedMs: Math.max(0, Date.now() - startedAt),
+    budget: {
+      maxTokens,
+      tokenCount: rendered.tokenCount
+    },
+    selected: rendered.selected,
+    omitted: receiptOmissions(rendered.omittedItems, base.hiddenCautionMemoryCount),
+    scheduledActions: scheduledActions(normalizedCautions)
+  };
   return {
     ...base,
     budget: {
@@ -15540,6 +16058,7 @@ async function buildTaskWorkset(input) {
       tokenCount: rendered.tokenCount,
       omitted: rendered.omitted
     },
+    receipt,
     prompt: rendered.prompt
   };
 }
@@ -16317,6 +16836,9 @@ import path19 from "path";
 function activeProjectObservations(observations2, projectId) {
   return observations2.filter((obs) => obs.projectId === projectId && (obs.status ?? "active") === "active");
 }
+function deliveryEligibleProjectObservations(observations2, projectId) {
+  return activeProjectObservations(observations2, projectId).filter((observation) => isEligibleForAutomaticDelivery(observation));
+}
 function decideRefresh(input) {
   if (input.mode === "never") {
     return { performed: false, reason: "disabled", message: "Automatic project scan disabled." };
@@ -16391,13 +16913,27 @@ async function buildAutoProjectContext(input) {
           activeProjectObservations(input.observations, input.project.id)
         );
         try {
-          const { enqueueClaimRequalification: enqueueClaimRequalification2 } = await Promise.resolve().then(() => (init_lifecycle(), lifecycle_exports));
+          const { MaintenanceTargetStore: MaintenanceTargetStore2 } = await Promise.resolve().then(() => (init_maintenance_targets(), maintenance_targets_exports));
+          new MaintenanceTargetStore2(input.dataDir).register({
+            projectId: input.project.id,
+            projectRoot: input.project.rootPath,
+            dataDir: input.dataDir
+          });
+          const {
+            enqueueClaimRequalification: enqueueClaimRequalification2,
+            enqueueObservationQualification: enqueueObservationQualification2
+          } = await Promise.resolve().then(() => (init_lifecycle(), lifecycle_exports));
           enqueueClaimRequalification2({
             dataDir: input.dataDir,
             projectId: input.project.id,
             source: "foreground-refresh",
             snapshotId: store.latestSnapshot(input.project.id)?.id
           });
+          enqueueObservationQualification2({
+            dataDir: input.dataDir,
+            projectId: input.project.id,
+            source: "foreground-refresh"
+          });
         } catch {
         }
         refresh = { ...refresh, backfill };
@@ -16414,7 +16950,9 @@ async function buildAutoProjectContext(input) {
   const explain = buildProjectContextExplain({
     project: input.project,
     store,
-    observations: input.observations,
+    // Binding sees all active evidence, but automatic delivery sees only
+    // evidence that has passed the control-plane admission gate.
+    observations: deliveryEligibleProjectObservations(input.observations, input.project.id),
     exclude
   });
   const overview = explain.overview;
@@ -16505,7 +17043,8 @@ async function buildAutoProjectContext(input) {
       suspect: overview.freshness.suspect,
       stale: overview.freshness.stale
     },
-    runtimeCautions
+    runtimeCautions,
+    ...input.deliveryTarget ? { deliveryTarget: input.deliveryTarget } : {}
   });
   return {
     project: input.project,
@@ -16739,6 +17278,7 @@ var init_auto_context = __esm({
     init_external_provider();
     init_project_context();
     init_store();
+    init_admission();
     init_task_lens();
     DEFAULT_MAX_AGE_MS = 10 * 60 * 1e3;
   }
@@ -16931,7 +17471,8 @@ async function attachTaskWorkset(input) {
       suspect: input.pack.warnings.filter((warning) => warning.status === "suspect").length,
       stale: input.pack.warnings.filter((warning) => warning.status === "stale").length
     },
-    runtimeCautions: input.runtimeCautions
+    runtimeCautions: input.runtimeCautions,
+    deliveryTarget: "context-pack"
   });
   return { ...input.pack, workset };
 }
@@ -18343,11 +18884,14 @@ __export(export_import_exports, {
   exportAsMarkdown: () => exportAsMarkdown,
   importFromJson: () => importFromJson
 });
-async function exportAsJson(projectDir2, projectId) {
+async function exportAsJson(projectDir2, projectId, reader) {
   const store = getObservationStore();
   const allObs = await store.loadAll();
   const allSessions = await getSessionStore().loadAll();
-  const projectObs = allObs.filter((o) => o.projectId === projectId);
+  const projectObs = filterReadableObservations(
+    allObs.filter((o) => o.projectId === projectId),
+    reader
+  );
   const projectSessions = allSessions.filter((s) => s.projectId === projectId);
   const typeBreakdown = {};
   for (const obs of projectObs) {
@@ -18366,8 +18910,8 @@ async function exportAsJson(projectDir2, projectId) {
     }
   };
 }
-async function exportAsMarkdown(projectDir2, projectId) {
-  const data = await exportAsJson(projectDir2, projectId);
+async function exportAsMarkdown(projectDir2, projectId, reader) {
+  const data = await exportAsJson(projectDir2, projectId, reader);
   const lines = [];
   lines.push(`# Memorix Export: ${projectId}`);
   lines.push(`Exported: ${data.exportedAt}`);
@@ -18469,6 +19013,7 @@ var init_export_import = __esm({
   "src/memory/export-import.ts"() {
     "use strict";
     init_esm_shims();
+    init_visibility();
     init_obs_store();
     init_session_store();
     OBSERVATION_ICONS2 = {
@@ -18645,6 +19190,7 @@ function isEligible(o, projectId) {
   if (isCommandLog2(o)) return false;
   if (isInactive(o)) return false;
   if (isOtherProject(o, projectId)) return false;
+  if (!isEligibleForKnowledgePromotion(o)) return false;
   if (o.valueCategory === "ephemeral") return false;
   if (!contextualHasSubstance(o)) return false;
   return true;
@@ -18793,6 +19339,7 @@ var init_generator = __esm({
   "src/wiki/generator.ts"() {
     "use strict";
     init_esm_shims();
+    init_admission();
     COMMAND_LOG_TITLE4 = /^(Ran:|Command:|Executed:)\s/i;
     SECTION_DEFS = [
       {
@@ -19079,6 +19626,9 @@ function sendError(res, message, status = 500) {
 function filterByProject(items, projectId) {
   return items.filter((item) => item.projectId === projectId);
 }
+function filterDashboardObservations(observations2, projectId) {
+  return filterReadableObservations(observations2, { projectId });
+}
 function isActiveStatus(status) {
   return (status ?? "active") === "active";
 }
@@ -19126,7 +19676,10 @@ async function handleApi(req, res, dataDir, projectId, projectName, baseDir, pro
     switch (apiPath) {
       case "/projects": {
         try {
-          const allObs = await getObservationStore().loadAll();
+          const allObs = filterReadableObservations(
+            await getObservationStore().loadAll(),
+            {}
+          );
           const projectSet = /* @__PURE__ */ new Map();
           for (const obs of allObs) {
             if (!isActiveStatus(obs.status)) continue;
@@ -19175,13 +19728,19 @@ async function handleApi(req, res, dataDir, projectId, projectName, baseDir, pro
         await initGraphStore(effectiveDataDir);
         const gStore = getGraphStore();
         const graph = { entities: gStore.loadEntities(), relations: gStore.loadRelations() };
-        const graphObs = await getObservationStore().loadByProject(effectiveProjectId, { status: "active" });
+        const graphObs = filterDashboardObservations(
+          await getObservationStore().loadByProject(effectiveProjectId, { status: "active" }),
+          effectiveProjectId
+        );
         const scoped = scopeKnowledgeGraphToProject(graph, graphObs);
         sendJson(res, { entities: scoped.entities, relations: scoped.relations });
         break;
       }
       case "/observations": {
-        const observations2 = await getObservationStore().loadByProject(effectiveProjectId, { status: "active" });
+        const observations2 = filterDashboardObservations(
+          await getObservationStore().loadByProject(effectiveProjectId, { status: "active" }),
+          effectiveProjectId
+        );
         sendJson(res, observations2);
         break;
       }
@@ -19194,7 +19753,10 @@ async function handleApi(req, res, dataDir, projectId, projectName, baseDir, pro
       case "/stats": {
         await initGraphStore(effectiveDataDir);
         const graph = { entities: getGraphStore().loadEntities(), relations: getGraphStore().loadRelations() };
-        const observations2 = await getObservationStore().loadByProject(effectiveProjectId, { status: "active" });
+        const observations2 = filterDashboardObservations(
+          await getObservationStore().loadByProject(effectiveProjectId, { status: "active" }),
+          effectiveProjectId
+        );
         const nextId2 = await getObservationStore().loadIdCounter();
         const projectGraphCounts = computeProjectGraphCounts(graph.entities, graph.relations, observations2);
         const typeCounts = {};
@@ -19312,7 +19874,10 @@ async function handleApi(req, res, dataDir, projectId, projectName, baseDir, pro
         break;
       }
       case "/retention": {
-        const observations2 = await getObservationStore().loadByProject(effectiveProjectId, { status: "active" });
+        const observations2 = filterDashboardObservations(
+          await getObservationStore().loadByProject(effectiveProjectId, { status: "active" }),
+          effectiveProjectId
+        );
         const now3 = Date.now();
         const scored = observations2.filter((obs) => obs.type !== "probe").map((obs) => {
           const age = now3 - new Date(obs.createdAt || now3).getTime();
@@ -19350,7 +19915,10 @@ async function handleApi(req, res, dataDir, projectId, projectName, baseDir, pro
         const { generateKnowledgeBase: generateKnowledgeBase2 } = await Promise.resolve().then(() => (init_generator(), generator_exports));
         const { initMiniSkillStore: initMiniSkillStore2, getMiniSkillStore: getMiniSkillStore2 } = await Promise.resolve().then(() => (init_mini_skill_store(), mini_skill_store_exports));
         await initMiniSkillStore2(effectiveDataDir);
-        const allObs = await getObservationStore().loadByProject(effectiveProjectId, { status: "active" });
+        const allObs = filterDashboardObservations(
+          await getObservationStore().loadByProject(effectiveProjectId, { status: "active" }),
+          effectiveProjectId
+        );
         const skills = await getMiniSkillStore2().loadByProject(effectiveProjectId);
         const overview = generateKnowledgeBase2({
           projectId: effectiveProjectId,
@@ -19366,7 +19934,10 @@ async function handleApi(req, res, dataDir, projectId, projectName, baseDir, pro
         const { initGraphStore: initGraphStore2, getGraphStore: getGraphStore2 } = await Promise.resolve().then(() => (init_graph_store(), graph_store_exports));
         await initMiniSkillStore2(effectiveDataDir);
         await initGraphStore2(effectiveDataDir);
-        const allObs = await getObservationStore().loadByProject(effectiveProjectId, { status: "active" });
+        const allObs = filterDashboardObservations(
+          await getObservationStore().loadByProject(effectiveProjectId, { status: "active" }),
+          effectiveProjectId
+        );
         const skills = await getMiniSkillStore2().loadByProject(effectiveProjectId);
         const fullGraph = { entities: getGraphStore2().loadEntities(), relations: getGraphStore2().loadRelations() };
         const scoped = scopeKnowledgeGraphToProject(fullGraph, allObs);
@@ -19489,7 +20060,7 @@ async function handleApi(req, res, dataDir, projectId, projectName, baseDir, pro
         break;
       }
       case "/identity": {
-        const allObs = await getObservationStore().loadAll();
+        const allObs = filterReadableObservations(await getObservationStore().loadAll(), {});
         const allProjectIds = [...new Set(allObs.map((o) => o.projectId).filter(Boolean))];
         let classifyProjectId2 = () => "real";
         let isDirtyProjectId2 = () => false;
@@ -19574,6 +20145,8 @@ async function handleApi(req, res, dataDir, projectId, projectName, baseDir, pro
             sendError(res, "Observation not found", 404);
           } else if (matchObs.projectId !== effectiveProjectId) {
             sendError(res, `Observation #${obsId} belongs to project "${matchObs.projectId}", not "${effectiveProjectId}"`, 403);
+          } else if (!canManageObservation(matchObs, { projectId: effectiveProjectId })) {
+            sendError(res, `Observation #${obsId} is not manageable from the unbound dashboard.`, 403);
           } else {
             await obsStore.remove(obsId);
             try {
@@ -19595,7 +20168,10 @@ async function handleApi(req, res, dataDir, projectId, projectName, baseDir, pro
         if (apiPath === "/export") {
           await initGraphStore(effectiveDataDir);
           const fullGraph = { entities: getGraphStore().loadEntities(), relations: getGraphStore().loadRelations() };
-          const observations2 = await getObservationStore().loadByProject(effectiveProjectId, { status: "active" });
+          const observations2 = filterDashboardObservations(
+            await getObservationStore().loadByProject(effectiveProjectId, { status: "active" }),
+            effectiveProjectId
+          );
           const nextId2 = await getObservationStore().loadIdCounter();
           const scoped = scopeKnowledgeGraphToProject(fullGraph, observations2);
           const exportData = {
@@ -19919,6 +20495,7 @@ var init_server = __esm({
     init_yaml_loader();
     init_yaml_loader();
     init_graph_scope();
+    init_visibility();
     MIME_TYPES = {
       ".html": "text/html; charset=utf-8",
       ".css": "text/css; charset=utf-8",
@@ -20696,6 +21273,11 @@ async function createHandoffArtifact(input, storeObservation2, teamStore) {
     sourceDetail: "explicit",
     valueCategory: "core",
     // immune to retention archival
+    // A direct handoff is not a project-wide memo. The sender retains access
+    // and the explicit recipient receives a read grant. Broadcast handoffs
+    // are deliberately visible only to active team members.
+    visibility: input.toAgentId ? "personal" : "team",
+    ...input.toAgentId ? { sharedWithAgentIds: [input.toAgentId] } : {},
     createdByAgentId: input.fromAgentId
   });
   try {
@@ -22695,6 +23277,7 @@ async function createAutoRelations(obs, extracted, graphManager) {
 // src/server.ts
 init_entity_extractor();
 init_graph_scope();
+init_visibility();
 
 // src/compact/engine.ts
 init_esm_shims();
@@ -22820,7 +23403,15 @@ function formatTimeline(timeline) {
 function formatObservationDetail(doc) {
   const icon = getTypeIcon(doc.type);
   const lines = [];
-  const header = buildProvenanceHeader(doc.sourceDetail, doc.valueCategory, doc.source, doc.commitHash, doc.relatedCommits);
+  const header = buildProvenanceHeader(
+    doc.sourceDetail,
+    doc.valueCategory,
+    doc.admissionState,
+    doc.admissionReason,
+    doc.source,
+    doc.commitHash,
+    doc.relatedCommits
+  );
   if (header) {
     lines.push(header);
     lines.push("");
@@ -22855,7 +23446,7 @@ function formatObservationDetail(doc) {
   }
   return lines.join("\n");
 }
-function buildProvenanceHeader(sourceDetail, valueCategory, source, commitHash, relatedCommits) {
+function buildProvenanceHeader(sourceDetail, valueCategory, admissionState, admissionReason, source, commitHash, relatedCommits) {
   const sd = resolveSourceDetail(sourceDetail, source);
   if (!sd) return "";
   const label = sourceKindLabel(sd);
@@ -22866,11 +23457,21 @@ function buildProvenanceHeader(sourceDetail, valueCategory, source, commitHash,
   if (verificationLine) {
     lines.push(verificationLine);
   }
-  if (valueCategory === "core") {
+  if (valueCategory === "core" && admissionState !== "candidate" && admissionState !== "ephemeral") {
     lines.push("[CORE] Core \u2014 immune to decay");
+  } else if (valueCategory === "core") {
+    lines.push("[CORE] Core candidate \u2014 not durable until qualification completes");
   } else if (valueCategory === "ephemeral") {
     lines.push("[WARN] Ephemeral \u2014 short-lived signal");
   }
+  if (admissionState === "candidate") {
+    lines.push("[PENDING] Candidate \u2014 excluded from automatic context until current Code Memory qualifies it");
+  } else if (admissionState === "ephemeral") {
+    lines.push("[TRACE] Ephemeral capture \u2014 excluded from automatic context");
+  } else if (admissionState === "qualified") {
+    lines.push("[QUALIFIED] Automatic evidence passed current Code Memory qualification");
+  }
+  if (admissionReason) lines.push(`Admission: ${redactCredentials(admissionReason)}`);
   return lines.join("\n");
 }
 function sourceKindLabel(sd) {
@@ -22951,6 +23552,7 @@ init_obs_store();
 init_mini_skill_store();
 init_mini_skills();
 init_secret_filter();
+init_visibility();
 function normalizeMemoryBrowseQuery(query) {
   const trimmed = query.trim();
   if (!trimmed) return "";
@@ -22993,11 +23595,13 @@ async function compactSearch(options) {
   );
   let formatted = formatIndexTable(entries, searchOptions.query, !options.projectId);
   if (entries.length === 0 && options.projectId) {
-    const allObservations = getAllObservations();
+    const allObservations = filterReadableObservations(getAllObservations(), options.reader);
     const projectAliases = new Set(await resolveAliases(options.projectId).catch(() => [options.projectId]));
     const projectHasStoredMemory = allObservations.some((obs) => obs.projectId && projectAliases.has(obs.projectId));
     if (!projectHasStoredMemory) {
-      formatted = `This project does not have any Memorix memories yet.
+      formatted = options.reader ? `No Memorix memories are available to this session yet.
+
+The tool call worked, but this session has no project-visible memory to retrieve.` : `This project does not have any Memorix memories yet.
 
 It looks like a fresh project: the tool call worked, but there is nothing stored to retrieve yet.
 
@@ -23011,8 +23615,8 @@ This project does have stored Memorix memories, but none matched the current que
   const totalTokens = countTextTokens(formatted);
   return { entries, formatted, totalTokens };
 }
-async function compactTimeline(anchorId, projectId, depthBefore = 3, depthAfter = 3) {
-  const result = await getTimeline(anchorId, projectId, depthBefore, depthAfter);
+async function compactTimeline(anchorId, projectId, depthBefore = 3, depthAfter = 3, reader) {
+  const result = await getTimeline(anchorId, projectId, depthBefore, depthAfter, reader);
   const timeline = {
     anchorId,
     anchorEntry: result.anchor,
@@ -23023,7 +23627,7 @@ async function compactTimeline(anchorId, projectId, depthBefore = 3, depthAfter
   const totalTokens = countTextTokens(formatted);
   return { timeline, formatted, totalTokens };
 }
-async function compactDetail(idsOrRefs) {
+async function compactDetail(idsOrRefs, options = {}) {
   const invalidRefs = [];
   const parsedRefs = [];
   for (let i = 0; i < idsOrRefs.length; i++) {
@@ -23080,7 +23684,7 @@ async function compactDetail(idsOrRefs) {
   const missingRefs = [];
   for (const ref of refs) {
     const obs = getObservation(ref.id, ref.projectId);
-    if (obs && (ref.projectId ? obs.projectId === ref.projectId : true)) {
+    if (obs && (ref.projectId ? obs.projectId === ref.projectId : true) && canReadObservation(obs, options.reader)) {
       documentMap.set(toRefKey(ref), {
         id: makeOramaObservationId(obs.projectId, obs.id),
         observationId: obs.id,
@@ -23099,7 +23703,12 @@ async function compactDetail(idsOrRefs) {
         status: obs.status ?? "active",
         source: obs.source ?? "agent",
         sourceDetail: obs.sourceDetail ?? "",
-        valueCategory: obs.valueCategory ?? ""
+        valueCategory: obs.valueCategory ?? "",
+        admissionState: obs.admissionState ?? "",
+        admissionReason: obs.admissionReason ?? "",
+        visibility: obs.visibility ?? "project",
+        createdByAgentId: obs.createdByAgentId ?? "",
+        sharedWithAgentIds: JSON.stringify(obs.sharedWithAgentIds ?? [])
       });
     } else {
       missingRefs.push(ref);
@@ -23109,17 +23718,17 @@ async function compactDetail(idsOrRefs) {
     for (const ref of missingRefs) {
       const fallbackDocs = await getObservationsByIds([ref.id], ref.projectId);
       const doc = fallbackDocs[0];
-      if (doc) {
+      if (doc && canReadObservation(doc, options.reader)) {
         documentMap.set(toRefKey(ref), doc);
         continue;
       }
       const stored = await getPersistedObservation(ref);
-      if (stored) {
+      if (stored && canReadObservation(stored, options.reader)) {
         documentMap.set(toRefKey(ref), observationToDocument(stored));
       }
     }
   }
-  const allObs = getAllObservations();
+  const allObs = filterReadableObservations(getAllObservations(), options.reader);
   const crossRefMap = /* @__PURE__ */ new Map();
   for (const ref of refs) {
     const obs = getObservation(ref.id, ref.projectId);
@@ -23233,7 +23842,12 @@ function observationToDocument(obs) {
     status: obs.status ?? "active",
     source: obs.source ?? "agent",
     sourceDetail: obs.sourceDetail ?? "",
-    valueCategory: obs.valueCategory ?? ""
+    valueCategory: obs.valueCategory ?? "",
+    admissionState: obs.admissionState ?? "",
+    admissionReason: obs.admissionReason ?? "",
+    visibility: obs.visibility ?? "project",
+    createdByAgentId: obs.createdByAgentId ?? "",
+    sharedWithAgentIds: JSON.stringify(obs.sharedWithAgentIds ?? [])
   };
 }
 function formatMiniSkillDetail(skill2, provenanceStatus) {
@@ -23352,7 +23966,9 @@ function auditMemoryQuality(observations2, options) {
     status: obs.status ?? "active",
     source: obs.source ?? "agent",
     sourceDetail: obs.sourceDetail ?? "",
-    valueCategory: obs.valueCategory ?? ""
+    valueCategory: obs.valueCategory ?? "",
+    admissionState: obs.admissionState ?? "",
+    admissionReason: obs.admissionReason ?? ""
   }, options.referenceTime) !== "active").map((obs) => makeEntry(obs, "Outside active retention zone"));
   const summary = {
     total: scoped.length,
@@ -23394,6 +24010,7 @@ function auditMemoryQuality(observations2, options) {
 
 // src/memory/graph-context.ts
 init_retention();
+init_admission();
 function formatGraphContextPrompt(packet) {
   const lines = [
     "## Memory Context Packet",
@@ -23551,7 +24168,9 @@ function scoreForPacket(obs, queryTokens, referenceTime, broadMemoryQuery) {
     status: obs.status ?? "active",
     source: obs.source ?? "agent",
     sourceDetail: obs.sourceDetail ?? "",
-    valueCategory: obs.valueCategory ?? ""
+    valueCategory: obs.valueCategory ?? "",
+    admissionState: obs.admissionState ?? "",
+    admissionReason: obs.admissionReason ?? ""
   }, referenceTime) !== "active") {
     score -= 2;
   }
@@ -23645,8 +24264,11 @@ function buildGraphContextPacket(observations2, options) {
     ...audit.issues.orphans.map((entry) => entry.id),
     ...audit.issues.retentionCandidates.map((entry) => entry.id)
   ]);
-  const filteredObservations = observations2.filter((obs) => obs.projectId === options.projectId && !riskIds.has(obs.id));
-  const baseObservations = filteredObservations.length > 0 ? filteredObservations : observations2;
+  const deliveryEligible = observations2.filter(
+    (obs) => obs.projectId === options.projectId && isEligibleForAutomaticDelivery(obs)
+  );
+  const filteredObservations = deliveryEligible.filter((obs) => !riskIds.has(obs.id));
+  const baseObservations = filteredObservations.length > 0 ? filteredObservations : deliveryEligible;
   const memories = pickMemories(baseObservations, options.projectId, options.query, options.limit ?? 5, referenceTime);
   const entities = buildEntities(memories);
   const entityNames = new Set(entities.map((entity) => entity.name));
@@ -26133,6 +26755,8 @@ async function createMemorixServer(cwd, existingServer, sharedTeam, options = {}
   let projectResolutionError = null;
   let explicitProjectBound = false;
   let currentAgentId;
+  let teamStore;
+  let initTeamStoreForProject;
   if (detectedProject) {
     rawProject = detectedProject;
   } else {
@@ -26380,7 +27004,7 @@ The path should point to a directory containing a .git folder.`
   };
   const server = existingServer ?? new McpServer({
     name: "memorix",
-    version: true ? "1.2.1" : "1.0.1"
+    version: true ? "1.2.3" : "1.0.1"
   });
   const originalRegisterTool = server.registerTool.bind(server);
   server.registerTool = ((name, ...args) => {
@@ -26400,11 +27024,26 @@ The path should point to a directory containing a .git folder.`
     }
     return originalRegisterTool(name, ...args);
   });
+  const getObservationReader = (scope = "project") => {
+    let isTeamMember = false;
+    if (teamFeaturesEnabled && currentAgentId) {
+      try {
+        const agent = teamStore.getAgent(currentAgentId);
+        isTeamMember = agent?.project_id === project.id && agent.status === "active";
+      } catch {
+      }
+    }
+    return {
+      ...scope === "project" ? { projectId: project.id } : {},
+      ...currentAgentId ? { agentId: currentAgentId } : {},
+      isTeamMember
+    };
+  };
   server.registerTool(
     "memorix_store",
     {
       title: "Store Memory",
-      description: "Store a new observation/memory. Automatically indexed for search. Use type to classify: gotcha ([GOTCHA] critical pitfall), decision ([DECISION] architecture choice), problem-solution ([FIX] bug fix), how-it-works ([INFO] explanation), what-changed ([CHANGE] change), discovery ([DISCOVERY] insight), why-it-exists ([WHY] rationale), trade-off ([TRADEOFF] compromise), session-request ([SESSION] original goal). Stored memories persist across sessions and are shared with other IDEs and agents (Cursor, Windsurf, Claude Code, Codex, Copilot, Gemini CLI, OpenCode, OpenClaw, Hermes Agent, Oh-my-Pi, Kiro, Antigravity, Trae) via the same local data directory.",
+      description: "Store a new observation/memory. Automatically indexed for search. Use type to classify: gotcha ([GOTCHA] critical pitfall), decision ([DECISION] architecture choice), problem-solution ([FIX] bug fix), how-it-works ([INFO] explanation), what-changed ([CHANGE] change), discovery ([DISCOVERY] insight), why-it-exists ([WHY] rationale), trade-off ([TRADEOFF] compromise), session-request ([SESSION] original goal). Project visibility is the default. Personal or team visibility requires an explicitly joined coordination identity.",
       inputSchema: {
         entityName: z2.string().describe('The entity this observation belongs to (e.g., "auth-module", "port-config")'),
         type: z2.enum(OBSERVATION_TYPES).describe("Observation type for classification"),
@@ -26422,361 +27061,214 @@ The path should point to a directory containing a .git folder.`
           completion: z2.number().optional().describe("Completion percentage 0-100")
         }).optional().describe("Progress tracking for task/feature observations"),
         relatedCommits: z2.array(z2.string()).optional().describe("Git commit hashes this memory relates to (links ground truth \u2194 reasoning)"),
-        relatedEntities: z2.array(z2.string()).optional().describe("Other entity names this memory cross-references")
+        relatedEntities: z2.array(z2.string()).optional().describe("Other entity names this memory cross-references"),
+        visibility: z2.enum(["personal", "project", "team"]).optional().describe(
+          "Retrieval scope. Project is the normal shared default; personal/team require memorix_session_start with joinTeam=true."
+        )
       }
     },
-    async ({ entityName: rawEntityName, type: rawType, title: rawTitle, narrative, facts, filesModified, concepts, topicKey, progress, relatedCommits, relatedEntities }) => {
+    async ({ entityName: rawEntityName, type: rawType, title: rawTitle, narrative, facts, filesModified, concepts, topicKey, progress, relatedCommits, relatedEntities, visibility }) => {
       const unresolved = requireResolvedProject("store memory in the current project");
       if (unresolved) return unresolved;
-      return withFreshIndex(async () => {
-        let entityName = rawEntityName;
-        let type = rawType;
-        let title = rawTitle;
-        let safeFacts = facts ? coerceStringArray(facts) : void 0;
-        const safeFiles = filesModified ? coerceStringArray(filesModified) : void 0;
-        const safeConcepts = concepts ? coerceStringArray(concepts) : void 0;
-        let formationMode = "active";
-        if (process.env.MEMORIX_FORMATION_MODE) {
-          formationMode = process.env.MEMORIX_FORMATION_MODE;
-        } else {
-          try {
-            const { getBehaviorConfig: getBehaviorConfig2 } = await Promise.resolve().then(() => (init_behavior(), behavior_exports));
-            formationMode = getBehaviorConfig2({ projectRoot: project.rootPath }).formationMode;
-          } catch {
+      const requestedVisibility = visibility ?? "project";
+      const reader = getObservationReader();
+      if (requestedVisibility !== "project" && !currentAgentId) {
+        return {
+          content: [{ type: "text", text: "Personal or team memory requires memorix_session_start with joinTeam=true so Memorix can bind an owner." }],
+          isError: true
+        };
+      }
+      if (requestedVisibility === "team" && !reader.isTeamMember) {
+        return {
+          content: [{ type: "text", text: "Team memory requires an active coordination membership in the current project." }],
+          isError: true
+        };
+      }
+      try {
+        return await withFreshIndex(async () => {
+          let entityName = rawEntityName;
+          let type = rawType;
+          let title = rawTitle;
+          let safeFacts = facts ? coerceStringArray(facts) : void 0;
+          const safeFiles = filesModified ? coerceStringArray(filesModified) : void 0;
+          const safeConcepts = concepts ? coerceStringArray(concepts) : void 0;
+          let formationMode = "active";
+          if (process.env.MEMORIX_FORMATION_MODE) {
+            formationMode = process.env.MEMORIX_FORMATION_MODE;
+          } else {
+            try {
+              const { getBehaviorConfig: getBehaviorConfig2 } = await Promise.resolve().then(() => (init_behavior(), behavior_exports));
+              formationMode = getBehaviorConfig2({ projectRoot: project.rootPath }).formationMode;
+            } catch {
+            }
           }
-        }
-        const useFormation = formationMode === "active";
-        let formationResult = null;
-        let formationNote = "";
-        if (useFormation && !topicKey && !progress) {
-          let currentFormationStage = "setup";
-          const completedFormationStages = {};
-          const formationStartTime = Date.now();
-          const onFormationStageEvent = (event) => {
-            if (event.status === "start") {
+          const useFormation = formationMode === "active";
+          let formationResult = null;
+          let formationNote = "";
+          if (useFormation && !topicKey && !progress) {
+            let currentFormationStage = "setup";
+            const completedFormationStages = {};
+            const formationStartTime = Date.now();
+            const onFormationStageEvent = (event) => {
+              if (event.status === "start") {
+                currentFormationStage = event.stage;
+                return;
+              }
               currentFormationStage = event.stage;
-              return;
-            }
-            currentFormationStage = event.stage;
-            if (event.stageDurationMs !== void 0) {
-              completedFormationStages[event.stage] = event.stageDurationMs;
-            }
-          };
-          try {
-            const formationConfig = {
-              mode: "active",
-              useLLM: isLLMEnabled(),
-              minValueScore: 0.3,
-              searchMemories: async (q, limit, pid) => {
-                const result = await compactSearch({ query: q, limit, projectId: pid, status: "active" });
-                if (result.entries.length === 0) return [];
-                const details = await compactDetail(result.entries.map((e) => e.id));
-                return details.documents.map((d, i) => ({
-                  id: Number(d.id.replace("obs-", "")),
-                  observationId: d.observationId,
-                  title: d.title,
-                  narrative: d.narrative,
-                  facts: d.facts,
-                  entityName: d.entityName,
-                  type: d.type,
-                  score: result.entries[i]?.score ?? 0
-                }));
-              },
-              getObservation: (id) => {
-                const o = getObservation(id);
-                if (!o) return null;
-                return {
-                  id: o.id,
-                  entityName: o.entityName,
-                  type: o.type,
-                  title: o.title,
-                  narrative: o.narrative,
-                  facts: o.facts,
-                  topicKey: o.topicKey
-                };
-              },
-              getEntityNames: () => graphManager.getEntityNames(),
-              onStageEvent: onFormationStageEvent
+              if (event.stageDurationMs !== void 0) {
+                completedFormationStages[event.stage] = event.stageDurationMs;
+              }
             };
-            formationResult = await withTimeout2(
-              runFormation({
-                entityName,
-                type,
-                title,
-                narrative,
-                facts: safeFacts,
-                projectId: project.id,
-                source: "explicit"
-              }, formationConfig),
-              FORMATION_TIMEOUT_MS,
-              "Formation pipeline"
-            );
-            const modeIcon = "[FAST]";
-            formationNote = `
+            try {
+              const formationConfig = {
+                mode: "active",
+                useLLM: isLLMEnabled(),
+                minValueScore: 0.3,
+                searchMemories: async (q, limit, pid) => {
+                  const result = await compactSearch({ query: q, limit, projectId: pid, status: "active", reader });
+                  if (result.entries.length === 0) return [];
+                  const details = await compactDetail(result.entries.map((e) => e.id), { reader });
+                  return details.documents.map((d, i) => ({
+                    id: Number(d.id.replace("obs-", "")),
+                    observationId: d.observationId,
+                    title: d.title,
+                    narrative: d.narrative,
+                    facts: d.facts,
+                    entityName: d.entityName,
+                    type: d.type,
+                    score: result.entries[i]?.score ?? 0
+                  }));
+                },
+                getObservation: (id) => {
+                  const o = getObservation(id);
+                  if (!o || o.projectId !== project.id || !canReadObservation(o, reader)) return null;
+                  return {
+                    id: o.id,
+                    entityName: o.entityName,
+                    type: o.type,
+                    title: o.title,
+                    narrative: o.narrative,
+                    facts: o.facts,
+                    topicKey: o.topicKey
+                  };
+                },
+                getEntityNames: () => graphManager.getEntityNames(),
+                onStageEvent: onFormationStageEvent
+              };
+              formationResult = await withTimeout2(
+                runFormation({
+                  entityName,
+                  type,
+                  title,
+                  narrative,
+                  facts: safeFacts,
+                  projectId: project.id,
+                  source: "explicit"
+                }, formationConfig),
+                FORMATION_TIMEOUT_MS,
+                "Formation pipeline"
+              );
+              const modeIcon = "[FAST]";
+              formationNote = `
 ${modeIcon} Formation[active]: ${formationResult.evaluation.category} (${formationResult.evaluation.score.toFixed(2)}) | ${formationResult.resolution.action} | ${formationResult.pipeline.durationMs}ms`;
-            if (formationResult.extraction.extractedFacts.length > 0) {
-              formationNote += ` | +${formationResult.extraction.extractedFacts.length} facts`;
-            }
-            if (formationResult.extraction.titleImproved) formationNote += " | title\u2191";
-            if (formationResult.extraction.entityResolved) formationNote += ` | entity\u2192${formationResult.entityName}`;
-            if (formationResult.extraction.typeCorrected) formationNote += ` | type\u2192${formationResult.type}`;
-          } catch (formationErr) {
-            const isTimeout = formationErr instanceof Error && formationErr.message.includes("timed out");
-            const elapsedMs = Date.now() - formationStartTime;
-            const stageSummary = formatFormationStageDurations(completedFormationStages);
-            console.error(
-              `[memorix] Formation ${isTimeout ? "timed out" : "failed"} in memorix_store after ${elapsedMs}ms/${FORMATION_TIMEOUT_MS}ms at stage ${currentFormationStage}${stageSummary ? ` | completed: ${stageSummary}` : ""}`
-            );
-            if (!isTimeout && formationErr instanceof Error) {
-              console.error(`[memorix] Formation error: ${formationErr.message}`);
-            }
-            formationNote = `
+              if (formationResult.extraction.extractedFacts.length > 0) {
+                formationNote += ` | +${formationResult.extraction.extractedFacts.length} facts`;
+              }
+              if (formationResult.extraction.titleImproved) formationNote += " | title\u2191";
+              if (formationResult.extraction.entityResolved) formationNote += ` | entity\u2192${formationResult.entityName}`;
+              if (formationResult.extraction.typeCorrected) formationNote += ` | type\u2192${formationResult.type}`;
+            } catch (formationErr) {
+              const isTimeout = formationErr instanceof Error && formationErr.message.includes("timed out");
+              const elapsedMs = Date.now() - formationStartTime;
+              const stageSummary = formatFormationStageDurations(completedFormationStages);
+              console.error(
+                `[memorix] Formation ${isTimeout ? "timed out" : "failed"} in memorix_store after ${elapsedMs}ms/${FORMATION_TIMEOUT_MS}ms at stage ${currentFormationStage}${stageSummary ? ` | completed: ${stageSummary}` : ""}`
+              );
+              if (!isTimeout && formationErr instanceof Error) {
+                console.error(`[memorix] Formation error: ${formationErr.message}`);
+              }
+              formationNote = `
 [WARN] Formation ${isTimeout ? "timed out" : "failed"} \u2014 storing base observation without enrichment`;
-          }
-        }
-        if (useFormation && formationResult && formationResult.resolution.action !== "new") {
-          const { action: action2, targetId, reason } = formationResult.resolution;
-          if (action2 === "merge" && targetId) {
-            const targetObs = getObservation(targetId);
-            if (targetObs) {
-              await storeObservation({
-                entityName: targetObs.entityName,
-                type: targetObs.type,
-                title: formationResult.title,
-                narrative: formationResult.narrative,
-                facts: formationResult.facts,
-                filesModified: safeFiles,
-                concepts: safeConcepts,
-                projectId: project.id,
-                topicKey: targetObs.topicKey,
-                progress,
-                sourceDetail: "explicit",
-                createdByAgentId: currentAgentId
-              });
-              return {
-                content: [{
-                  type: "text",
-                  text: `[UPDATED] Formation MERGE: merged into #${targetId} (${reason})${formationNote}`
-                }]
-              };
-            }
-          } else if (action2 === "evolve" && targetId) {
-            const targetObs = getObservation(targetId);
-            if (targetObs) {
-              await storeObservation({
-                entityName: targetObs.entityName,
-                type: targetObs.type,
-                title: formationResult.title,
-                narrative: formationResult.narrative,
-                facts: formationResult.facts,
-                filesModified: safeFiles,
-                concepts: safeConcepts,
-                projectId: project.id,
-                topicKey: targetObs.topicKey,
-                progress,
-                sourceDetail: "explicit",
-                createdByAgentId: currentAgentId
-              });
-              return {
-                content: [{
-                  type: "text",
-                  text: `[UPDATED] Formation EVOLVE: evolved #${targetId} (${reason})${formationNote}`
-                }]
-              };
             }
-          } else if (action2 === "discard") {
-            return {
-              content: [{
-                type: "text",
-                text: `[SKIP] Formation DISCARD: ${reason}${formationNote}`
-              }]
-            };
           }
-        }
-        let compactAction = "";
-        let compactMerged = false;
-        if (!useFormation && !topicKey && !progress) {
-          try {
-            const searchResult = await compactSearch({
-              query: `${title} ${narrative.substring(0, 200)}`,
-              limit: 5,
-              projectId: project.id,
-              status: "active"
-            });
-            const similarEntries = searchResult.entries.map((e) => e);
-            if (similarEntries.length > 0) {
-              const similarIds = similarEntries.map((e) => e.id);
-              const details = await compactDetail(similarIds);
-              const existingMemories = details.documents.map((d, i) => ({
-                id: d.observationId,
-                title: d.title,
-                narrative: d.narrative,
-                facts: d.facts,
-                score: similarEntries[i]?.score ?? 0
-              }));
-              const decision = await withTimeout2(
-                compactOnWrite(
-                  { title, narrative, facts: safeFacts ?? [] },
-                  existingMemories
-                ),
-                COMPACT_ON_WRITE_TIMEOUT_MS,
-                "Compact-on-write"
-              );
-              if (decision.action === "UPDATE" && decision.targetId) {
-                const targetObs = getObservation(decision.targetId);
-                if (targetObs) {
-                  await storeObservation({
-                    entityName: targetObs.entityName,
-                    type: targetObs.type,
-                    title: decision.mergedNarrative ? title : targetObs.title,
-                    narrative: decision.mergedNarrative ?? narrative,
-                    facts: decision.mergedFacts ?? safeFacts,
-                    filesModified: safeFiles,
-                    concepts: safeConcepts,
-                    projectId: project.id,
-                    topicKey: targetObs.topicKey,
-                    progress,
-                    sourceDetail: "explicit",
-                    createdByAgentId: currentAgentId
-                  });
-                  compactAction = `[UPDATED] Compact UPDATE: merged into #${decision.targetId} (${decision.reason})`;
-                  compactMerged = true;
-                  return {
-                    content: [{
-                      type: "text",
-                      text: `${compactAction}
-Mode: ${decision.usedLLM ? "LLM" : "heuristic"}`
-                    }]
-                  };
-                }
-              } else if (decision.action === "NONE") {
+          if (useFormation && formationResult && formationResult.resolution.action !== "new") {
+            const { action: action2, targetId, reason } = formationResult.resolution;
+            if (action2 === "merge" && targetId) {
+              const targetObs = getObservation(targetId);
+              if (targetObs && targetObs.projectId === project.id && canReadObservation(targetObs, reader)) {
+                await storeObservation({
+                  entityName: targetObs.entityName,
+                  type: targetObs.type,
+                  title: formationResult.title,
+                  narrative: formationResult.narrative,
+                  facts: formationResult.facts,
+                  filesModified: safeFiles,
+                  concepts: safeConcepts,
+                  projectId: project.id,
+                  topicKey: targetObs.topicKey,
+                  progress,
+                  sourceDetail: "explicit",
+                  createdByAgentId: currentAgentId,
+                  visibility,
+                  visibilityReader: reader
+                });
                 return {
                   content: [{
                     type: "text",
-                    text: `[SKIP] Compact SKIP: ${decision.reason}
-Existing memory #${decision.targetId} already covers this.
-Mode: ${decision.usedLLM ? "LLM" : "heuristic"}`
+                    text: `[UPDATED] Formation MERGE: merged into #${targetId} (${reason})${formationNote}`
                   }]
                 };
-              } else if (decision.action === "DELETE" && decision.targetId) {
-                const { resolveObservations: resolveObservations2 } = await Promise.resolve().then(() => (init_observations(), observations_exports));
-                await resolveObservations2([decision.targetId], "resolved");
-                compactAction = ` | Compact: resolved outdated #${decision.targetId}`;
               }
-              if (decision.enrichedFacts && decision.enrichedFacts.length > 0) {
-                const currentFacts = safeFacts ?? [];
-                const newFacts = decision.enrichedFacts.filter((f) => !currentFacts.includes(f));
-                if (newFacts.length > 0) {
-                  compactAction += ` | +${newFacts.length} LLM-extracted facts`;
-                }
+            } else if (action2 === "evolve" && targetId) {
+              const targetObs = getObservation(targetId);
+              if (targetObs && targetObs.projectId === project.id && canReadObservation(targetObs, reader)) {
+                await storeObservation({
+                  entityName: targetObs.entityName,
+                  type: targetObs.type,
+                  title: formationResult.title,
+                  narrative: formationResult.narrative,
+                  facts: formationResult.facts,
+                  filesModified: safeFiles,
+                  concepts: safeConcepts,
+                  projectId: project.id,
+                  topicKey: targetObs.topicKey,
+                  progress,
+                  sourceDetail: "explicit",
+                  createdByAgentId: currentAgentId,
+                  visibility,
+                  visibilityReader: reader
+                });
+                return {
+                  content: [{
+                    type: "text",
+                    text: `[UPDATED] Formation EVOLVE: evolved #${targetId} (${reason})${formationNote}`
+                  }]
+                };
               }
+            } else if (action2 === "discard") {
+              return {
+                content: [{
+                  type: "text",
+                  text: `[SKIP] Formation DISCARD: ${reason}${formationNote}`
+                }]
+              };
             }
-          } catch {
-          }
-        }
-        if (formationResult && formationResult.resolution.action === "new") {
-          const llmFacts = formationResult.extraction.extractedFacts;
-          if (llmFacts.length > 0) {
-            const currentFacts = safeFacts ?? [];
-            const currentLower = new Set(currentFacts.map((f) => f.toLowerCase().trim()));
-            const newFacts = llmFacts.filter((f) => !currentLower.has(f.toLowerCase().trim()));
-            if (newFacts.length > 0) {
-              safeFacts = [...currentFacts, ...newFacts];
-            }
-          }
-          if (formationResult.extraction.titleImproved && formationResult.title) {
-            title = formationResult.title;
-          }
-          if (formationResult.extraction.typeCorrected && formationResult.type) {
-            type = formationResult.type;
-          }
-          if (formationResult.extraction.entityResolved && formationResult.entityName) {
-            entityName = formationResult.entityName;
-          }
-        }
-        await graphManager.createEntities([
-          { name: entityName, entityType: "auto", observations: [] }
-        ]);
-        let sessionId;
-        try {
-          const { getActiveSession: getActiveSession2 } = await Promise.resolve().then(() => (init_session(), session_exports));
-          const active = await getActiveSession2(projectDir2, project.id);
-          if (active) sessionId = active.id;
-        } catch {
-        }
-        let finalNarrative = narrative;
-        let compressionNote = "";
-        try {
-          const { compressNarrative: compressNarrative2 } = await Promise.resolve().then(() => (init_quality(), quality_exports));
-          const { compressed, saved, usedLLM } = await withTimeout2(
-            compressNarrative2(narrative, safeFacts, type),
-            COMPRESSION_TIMEOUT_MS,
-            "Narrative compression"
-          );
-          if (usedLLM && saved > 0) {
-            finalNarrative = compressed;
-            compressionNote = ` | compressed -${saved} tokens`;
-          }
-        } catch {
-        }
-        let attributionWarning = "";
-        try {
-          const attrCheck = await checkProjectAttribution(entityName, project.id, getAllObservations());
-          if (attrCheck.suspicious) {
-            attributionWarning = `
-[WARN] Attribution notice: entity "${entityName}" has 0 observations in "${project.id}" but ${attrCheck.count} in "${attrCheck.knownIn}" (confidence: ${attrCheck.confidence}). Verify the correct project is bound before storing.`;
           }
-        } catch {
-        }
-        const { observation: obs, upserted } = await storeObservation({
-          entityName,
-          type,
-          title,
-          narrative: finalNarrative,
-          facts: safeFacts,
-          filesModified: safeFiles,
-          concepts: safeConcepts,
-          projectId: project.id,
-          topicKey,
-          sessionId,
-          progress,
-          relatedCommits,
-          relatedEntities,
-          sourceDetail: "explicit",
-          valueCategory: formationResult?.evaluation.category,
-          createdByAgentId: currentAgentId
-        });
-        await graphManager.addObservations([
-          { entityName, contents: [`[#${obs.id}] ${title}`] }
-        ]);
-        const extracted = extractEntities([title, narrative, ...safeFacts ?? []].join(" "));
-        const autoRelCount = await createAutoRelations(obs, extracted, graphManager);
-        const enrichmentParts = [];
-        const autoFiles = obs.filesModified.filter((f) => !(safeFiles ?? []).includes(f));
-        const autoConcepts = obs.concepts.filter((c) => !(safeConcepts ?? []).includes(c));
-        if (autoFiles.length > 0) enrichmentParts.push(`+${autoFiles.length} files extracted`);
-        if (autoConcepts.length > 0) enrichmentParts.push(`+${autoConcepts.length} concepts enriched`);
-        if (autoRelCount > 0) enrichmentParts.push(`+${autoRelCount} relations auto-created`);
-        if (obs.hasCausalLanguage) enrichmentParts.push("causal language detected");
-        if (upserted) enrichmentParts.push(`topic upserted (rev ${obs.revisionCount ?? 1})`);
-        const enrichment = enrichmentParts.length > 0 ? `
-Auto-enriched: ${enrichmentParts.join(", ")}` : "";
-        const action = upserted ? "[UPDATED] Updated" : "[OK] Stored";
-        if (!useFormation && !topicKey && !progress) {
-          const shadowFormation = async () => {
-            let oldCompactDecision = null;
+          let compactAction = "";
+          let compactMerged = false;
+          if (!useFormation && !topicKey && !progress) {
             try {
-              const compactStart = Date.now();
               const searchResult = await compactSearch({
                 query: `${title} ${narrative.substring(0, 200)}`,
                 limit: 5,
                 projectId: project.id,
-                status: "active"
+                status: "active",
+                reader
               });
               const similarEntries = searchResult.entries.map((e) => e);
               if (similarEntries.length > 0) {
                 const similarIds = similarEntries.map((e) => e.id);
-                const details = await compactDetail(similarIds);
+                const details = await compactDetail(similarIds, { reader });
                 const existingMemories = details.documents.map((d, i) => ({
                   id: d.observationId,
                   title: d.title,
@@ -26784,78 +27276,266 @@ Auto-enriched: ${enrichmentParts.join(", ")}` : "";
                   facts: d.facts,
                   score: similarEntries[i]?.score ?? 0
                 }));
-                const decision = await compactOnWrite(
-                  { title, narrative, facts: safeFacts ?? [] },
-                  existingMemories
+                const decision = await withTimeout2(
+                  compactOnWrite(
+                    { title, narrative, facts: safeFacts ?? [] },
+                    existingMemories
+                  ),
+                  COMPACT_ON_WRITE_TIMEOUT_MS,
+                  "Compact-on-write"
                 );
-                oldCompactDecision = {
-                  action: decision.action,
-                  targetId: decision.targetId,
-                  reason: decision.reason,
-                  durationMs: Date.now() - compactStart
-                };
+                if (decision.action === "UPDATE" && decision.targetId) {
+                  const targetObs = getObservation(decision.targetId);
+                  if (targetObs && targetObs.projectId === project.id && canReadObservation(targetObs, reader)) {
+                    await storeObservation({
+                      entityName: targetObs.entityName,
+                      type: targetObs.type,
+                      title: decision.mergedNarrative ? title : targetObs.title,
+                      narrative: decision.mergedNarrative ?? narrative,
+                      facts: decision.mergedFacts ?? safeFacts,
+                      filesModified: safeFiles,
+                      concepts: safeConcepts,
+                      projectId: project.id,
+                      topicKey: targetObs.topicKey,
+                      progress,
+                      sourceDetail: "explicit",
+                      createdByAgentId: currentAgentId,
+                      visibility,
+                      visibilityReader: reader
+                    });
+                    compactAction = `[UPDATED] Compact UPDATE: merged into #${decision.targetId} (${decision.reason})`;
+                    compactMerged = true;
+                    return {
+                      content: [{
+                        type: "text",
+                        text: `${compactAction}
+Mode: ${decision.usedLLM ? "LLM" : "heuristic"}`
+                      }]
+                    };
+                  }
+                } else if (decision.action === "NONE") {
+                  return {
+                    content: [{
+                      type: "text",
+                      text: `[SKIP] Compact SKIP: ${decision.reason}
+Existing memory #${decision.targetId} already covers this.
+Mode: ${decision.usedLLM ? "LLM" : "heuristic"}`
+                    }]
+                  };
+                } else if (decision.action === "DELETE" && decision.targetId) {
+                  const { resolveObservations: resolveObservations2 } = await Promise.resolve().then(() => (init_observations(), observations_exports));
+                  await resolveObservations2([decision.targetId], "resolved");
+                  compactAction = ` | Compact: resolved outdated #${decision.targetId}`;
+                }
+                if (decision.enrichedFacts && decision.enrichedFacts.length > 0) {
+                  const currentFacts = safeFacts ?? [];
+                  const newFacts = decision.enrichedFacts.filter((f) => !currentFacts.includes(f));
+                  if (newFacts.length > 0) {
+                    compactAction += ` | +${newFacts.length} LLM-extracted facts`;
+                  }
+                }
               }
             } catch {
             }
-            const formationConfig = {
-              mode: formationMode,
-              useLLM: isLLMEnabled(),
-              minValueScore: 0.3,
-              searchMemories: async (q, limit, pid) => {
-                const result = await compactSearch({ query: q, limit, projectId: pid, status: "active" });
-                if (result.entries.length === 0) return [];
-                const details = await compactDetail(result.entries.map((e) => e.id));
-                return details.documents.map((d, i) => ({
-                  id: Number(d.id.replace("obs-", "")),
-                  observationId: d.observationId,
-                  title: d.title,
-                  narrative: d.narrative,
-                  facts: d.facts,
-                  entityName: d.entityName,
-                  type: d.type,
-                  score: result.entries[i]?.score ?? 0
-                }));
-              },
-              getObservation: (id) => {
-                const o = getObservation(id);
-                if (!o) return null;
-                return { id: o.id, entityName: o.entityName, type: o.type, title: o.title, narrative: o.narrative, facts: o.facts, topicKey: o.topicKey };
-              },
-              getEntityNames: () => graphManager.getEntityNames()
-            };
-            const formed = await withTimeout2(
-              runFormation({ entityName, type, title, narrative, facts: safeFacts, projectId: project.id, source: "explicit", topicKey }, formationConfig),
-              FORMATION_TIMEOUT_MS,
-              "Shadow formation"
+          }
+          if (formationResult && formationResult.resolution.action === "new") {
+            const llmFacts = formationResult.extraction.extractedFacts;
+            if (llmFacts.length > 0) {
+              const currentFacts = safeFacts ?? [];
+              const currentLower = new Set(currentFacts.map((f) => f.toLowerCase().trim()));
+              const newFacts = llmFacts.filter((f) => !currentLower.has(f.toLowerCase().trim()));
+              if (newFacts.length > 0) {
+                safeFacts = [...currentFacts, ...newFacts];
+              }
+            }
+            if (formationResult.extraction.titleImproved && formationResult.title) {
+              title = formationResult.title;
+            }
+            if (formationResult.extraction.typeCorrected && formationResult.type) {
+              type = formationResult.type;
+            }
+            if (formationResult.extraction.entityResolved && formationResult.entityName) {
+              entityName = formationResult.entityName;
+            }
+          }
+          await graphManager.createEntities([
+            { name: entityName, entityType: "auto", observations: [] }
+          ]);
+          let sessionId;
+          try {
+            const { getActiveSession: getActiveSession2 } = await Promise.resolve().then(() => (init_session(), session_exports));
+            const active = await getActiveSession2(projectDir2, project.id);
+            if (active) sessionId = active.id;
+          } catch {
+          }
+          let finalNarrative = narrative;
+          let compressionNote = "";
+          try {
+            const { compressNarrative: compressNarrative2 } = await Promise.resolve().then(() => (init_quality(), quality_exports));
+            const { compressed, saved, usedLLM } = await withTimeout2(
+              compressNarrative2(narrative, safeFacts, type),
+              COMPRESSION_TIMEOUT_MS,
+              "Narrative compression"
             );
-            const { recordBeforeAfterMetrics: recordBeforeAfterMetrics2 } = await Promise.resolve().then(() => (init_formation(), formation_exports));
-            if (oldCompactDecision) {
-              recordBeforeAfterMetrics2({
-                formationAction: formed.resolution.action,
-                formationTargetId: formed.resolution.targetId,
-                oldCompactAction: oldCompactDecision.action,
-                oldCompactTargetId: oldCompactDecision.targetId,
-                oldCompactReason: oldCompactDecision.reason,
-                formationValueScore: formed.evaluation.score,
-                formationValueCategory: formed.evaluation.category,
-                formationDurationMs: formed.pipeline.durationMs,
-                compactDurationMs: oldCompactDecision.durationMs
-              });
+            if (usedLLM && saved > 0) {
+              finalNarrative = compressed;
+              compressionNote = ` | compressed -${saved} tokens`;
             }
-          };
-          shadowFormation().catch(() => {
+          } catch {
+          }
+          let attributionWarning = "";
+          try {
+            const attrCheck = await checkProjectAttribution(
+              entityName,
+              project.id,
+              filterReadableObservations(getAllObservations(), reader)
+            );
+            if (attrCheck.suspicious) {
+              attributionWarning = `
+[WARN] Attribution notice: entity "${entityName}" has 0 observations in "${project.id}" but ${attrCheck.count} in "${attrCheck.knownIn}" (confidence: ${attrCheck.confidence}). Verify the correct project is bound before storing.`;
+            }
+          } catch {
+          }
+          const { observation: obs, upserted } = await storeObservation({
+            entityName,
+            type,
+            title,
+            narrative: finalNarrative,
+            facts: safeFacts,
+            filesModified: safeFiles,
+            concepts: safeConcepts,
+            projectId: project.id,
+            topicKey,
+            sessionId,
+            progress,
+            relatedCommits,
+            relatedEntities,
+            sourceDetail: "explicit",
+            valueCategory: formationResult?.evaluation.category,
+            createdByAgentId: currentAgentId,
+            visibility,
+            visibilityReader: reader
           });
-        }
-        return {
-          content: [
-            {
-              type: "text",
-              text: `${action} observation #${obs.id} "${title}" (~${obs.tokens} tokens)
+          await graphManager.addObservations([
+            { entityName, contents: [`[#${obs.id}] ${title}`] }
+          ]);
+          const extracted = extractEntities([title, narrative, ...safeFacts ?? []].join(" "));
+          const autoRelCount = await createAutoRelations(obs, extracted, graphManager);
+          const enrichmentParts = [];
+          const autoFiles = obs.filesModified.filter((f) => !(safeFiles ?? []).includes(f));
+          const autoConcepts = obs.concepts.filter((c) => !(safeConcepts ?? []).includes(c));
+          if (autoFiles.length > 0) enrichmentParts.push(`+${autoFiles.length} files extracted`);
+          if (autoConcepts.length > 0) enrichmentParts.push(`+${autoConcepts.length} concepts enriched`);
+          if (autoRelCount > 0) enrichmentParts.push(`+${autoRelCount} relations auto-created`);
+          if (obs.hasCausalLanguage) enrichmentParts.push("causal language detected");
+          if (upserted) enrichmentParts.push(`topic upserted (rev ${obs.revisionCount ?? 1})`);
+          const enrichment = enrichmentParts.length > 0 ? `
+Auto-enriched: ${enrichmentParts.join(", ")}` : "";
+          const action = upserted ? "[UPDATED] Updated" : "[OK] Stored";
+          if (!useFormation && !topicKey && !progress) {
+            const shadowFormation = async () => {
+              let oldCompactDecision = null;
+              try {
+                const compactStart = Date.now();
+                const searchResult = await compactSearch({
+                  query: `${title} ${narrative.substring(0, 200)}`,
+                  limit: 5,
+                  projectId: project.id,
+                  status: "active",
+                  reader
+                });
+                const similarEntries = searchResult.entries.map((e) => e);
+                if (similarEntries.length > 0) {
+                  const similarIds = similarEntries.map((e) => e.id);
+                  const details = await compactDetail(similarIds, { reader });
+                  const existingMemories = details.documents.map((d, i) => ({
+                    id: d.observationId,
+                    title: d.title,
+                    narrative: d.narrative,
+                    facts: d.facts,
+                    score: similarEntries[i]?.score ?? 0
+                  }));
+                  const decision = await compactOnWrite(
+                    { title, narrative, facts: safeFacts ?? [] },
+                    existingMemories
+                  );
+                  oldCompactDecision = {
+                    action: decision.action,
+                    targetId: decision.targetId,
+                    reason: decision.reason,
+                    durationMs: Date.now() - compactStart
+                  };
+                }
+              } catch {
+              }
+              const formationConfig = {
+                mode: formationMode,
+                useLLM: isLLMEnabled(),
+                minValueScore: 0.3,
+                searchMemories: async (q, limit, pid) => {
+                  const result = await compactSearch({ query: q, limit, projectId: pid, status: "active", reader });
+                  if (result.entries.length === 0) return [];
+                  const details = await compactDetail(result.entries.map((e) => e.id), { reader });
+                  return details.documents.map((d, i) => ({
+                    id: Number(d.id.replace("obs-", "")),
+                    observationId: d.observationId,
+                    title: d.title,
+                    narrative: d.narrative,
+                    facts: d.facts,
+                    entityName: d.entityName,
+                    type: d.type,
+                    score: result.entries[i]?.score ?? 0
+                  }));
+                },
+                getObservation: (id) => {
+                  const o = getObservation(id);
+                  if (!o || o.projectId !== project.id || !canReadObservation(o, reader)) return null;
+                  return { id: o.id, entityName: o.entityName, type: o.type, title: o.title, narrative: o.narrative, facts: o.facts, topicKey: o.topicKey };
+                },
+                getEntityNames: () => graphManager.getEntityNames()
+              };
+              const formed = await withTimeout2(
+                runFormation({ entityName, type, title, narrative, facts: safeFacts, projectId: project.id, source: "explicit", topicKey }, formationConfig),
+                FORMATION_TIMEOUT_MS,
+                "Shadow formation"
+              );
+              const { recordBeforeAfterMetrics: recordBeforeAfterMetrics2 } = await Promise.resolve().then(() => (init_formation(), formation_exports));
+              if (oldCompactDecision) {
+                recordBeforeAfterMetrics2({
+                  formationAction: formed.resolution.action,
+                  formationTargetId: formed.resolution.targetId,
+                  oldCompactAction: oldCompactDecision.action,
+                  oldCompactTargetId: oldCompactDecision.targetId,
+                  oldCompactReason: oldCompactDecision.reason,
+                  formationValueScore: formed.evaluation.score,
+                  formationValueCategory: formed.evaluation.category,
+                  formationDurationMs: formed.pipeline.durationMs,
+                  compactDurationMs: oldCompactDecision.durationMs
+                });
+              }
+            };
+            shadowFormation().catch(() => {
+            });
+          }
+          return {
+            content: [
+              {
+                type: "text",
+                text: `${action} observation #${obs.id} "${title}" (~${obs.tokens} tokens)
 Entity: ${entityName} | Type: ${type} | Project: ${project.id}${obs.topicKey ? ` | Topic: ${obs.topicKey}` : ""}${compactAction}${compressionNote}${enrichment}${formationNote}${attributionWarning}`
-            }
-          ]
+              }
+            ]
+          };
+        });
+      } catch (error) {
+        return {
+          content: [{
+            type: "text",
+            text: error instanceof Error ? error.message : "Failed to store memory."
+          }],
+          isError: true
         };
-      });
+      }
     }
   );
   server.registerTool(
@@ -26927,7 +27607,8 @@ Use this as the \`topicKey\` parameter in \`memorix_store\` to enable upsert beh
           // Use scope: 'global' to explicitly search all projects.
           projectId: scope === "global" ? void 0 : project.id,
           status: status ?? "active",
-          source
+          source,
+          reader: getObservationReader(scope === "global" ? "global" : "project")
         });
         const timeoutPromise = new Promise(
           (_, reject) => setTimeout(() => reject(new Error(`Search timeout after ${TIMEOUT_MS}ms`)), TIMEOUT_MS)
@@ -26985,7 +27666,10 @@ _Search mode: ${getLastSearchMode2(project.id)}_`;
       const unresolved = requireResolvedProject("build graph context for the current project");
       if (unresolved) return unresolved;
       const { getObservationStore: getObservationStore2 } = await Promise.resolve().then(() => (init_obs_store(), obs_store_exports));
-      const observations2 = await getObservationStore2().loadByProject(project.id);
+      const observations2 = filterReadableObservations(
+        await getObservationStore2().loadByProject(project.id),
+        getObservationReader()
+      );
       const packet = buildGraphContextPacket(observations2, {
         projectId: project.id,
         query,
@@ -27037,7 +27721,10 @@ _Search mode: ${getLastSearchMode2(project.id)}_`;
         Promise.resolve().then(() => (init_maintenance_jobs(), maintenance_jobs_exports)),
         Promise.resolve().then(() => (init_lifecycle(), lifecycle_exports))
       ]);
-      const observations2 = await getObservationStore2().loadByProject(project.id, { status: "active" });
+      const observations2 = filterReadableObservations(
+        await getObservationStore2().loadByProject(project.id, { status: "active" }),
+        getObservationReader()
+      );
       const context = await buildAutoProjectContext2({
         project,
         dataDir: projectDir2,
@@ -27127,7 +27814,10 @@ _Search mode: ${getLastSearchMode2(project.id)}_`;
       await store.init(projectDir2);
       const codegraphConfig = getResolvedConfig2({ projectRoot: project.rootPath }).codegraph;
       const exclude = codegraphConfig.excludePatterns;
-      const observations2 = await getObservationStore2().loadByProject(project.id, { status: "active" });
+      const observations2 = filterReadableObservations(
+        await getObservationStore2().loadByProject(project.id, { status: "active" }),
+        getObservationReader()
+      );
       observations2.reverse();
       const basePack = assembleContextPackForTask2({
         store,
@@ -27499,9 +28189,15 @@ _Search mode: ${getLastSearchMode2(project.id)}_`;
       }
     },
     async ({ ids, status }) => {
-      const { resolveObservations: resolveObservations2 } = await Promise.resolve().then(() => (init_observations(), observations_exports));
+      const { resolveObservations: resolveObservations2, getObservation: getObservation2 } = await Promise.resolve().then(() => (init_observations(), observations_exports));
       const safeIds = (Array.isArray(ids) ? ids : [ids]).map((id) => coerceNumber(id, 0)).filter((id) => id > 0);
-      const result = await resolveObservations2(safeIds, status ?? "resolved");
+      const reader = getObservationReader();
+      const authorizedIds = safeIds.filter((id) => {
+        const observation = getObservation2(id, project.id);
+        return observation ? canManageObservation(observation, reader) : false;
+      });
+      const result = await resolveObservations2(authorizedIds, status ?? "resolved");
+      const deniedCount = safeIds.length - authorizedIds.length;
       const parts = [];
       if (result.resolved.length > 0) {
         parts.push(`[OK] Resolved ${result.resolved.length} observation(s): #${result.resolved.join(", #")}`);
@@ -27509,6 +28205,9 @@ _Search mode: ${getLastSearchMode2(project.id)}_`;
       if (result.notFound.length > 0) {
         parts.push(`[WARN] Not found: #${result.notFound.join(", #")}`);
       }
+      if (deniedCount > 0) {
+        parts.push(`[WARN] Skipped ${deniedCount} observation(s) outside this session's write scope.`);
+      }
       parts.push('\nResolved memories are hidden from default search. Use status="all" to include them.');
       parts.push('[STATS] Run `memorix_retention` with `action: "report"` to check remaining cleanup status.');
       return {
@@ -27538,6 +28237,7 @@ _Search mode: ${getLastSearchMode2(project.id)}_`;
     async ({ entityName, decision, alternatives, rationale, constraints, expectedOutcome, risks, concepts, filesModified, relatedCommits, relatedEntities }) => {
       const unresolved = requireResolvedProject("store reasoning in the current project");
       if (unresolved) return unresolved;
+      const reader = getObservationReader();
       return withFreshIndex(async () => {
         const narrativeParts = [rationale];
         if (alternatives && alternatives.length > 0) {
@@ -27560,7 +28260,11 @@ _Search mode: ${getLastSearchMode2(project.id)}_`;
         ]);
         let reasoningAttributionWarning = "";
         try {
-          const attrCheck = await checkProjectAttribution(entityName, project.id, getAllObservations());
+          const attrCheck = await checkProjectAttribution(
+            entityName,
+            project.id,
+            filterReadableObservations(getAllObservations(), reader)
+          );
           if (attrCheck.suspicious) {
             reasoningAttributionWarning = `
 [WARN] Attribution notice: entity "${entityName}" has 0 observations in "${project.id}" but ${attrCheck.count} in "${attrCheck.knownIn}" (confidence: ${attrCheck.confidence}). Verify the correct project is bound before storing.`;
@@ -27580,7 +28284,8 @@ _Search mode: ${getLastSearchMode2(project.id)}_`;
           relatedCommits,
           relatedEntities,
           sourceDetail: "explicit",
-          createdByAgentId: currentAgentId
+          createdByAgentId: currentAgentId,
+          visibility: "project"
         });
         await graphManager.addObservations([
           { entityName, contents: [`[#${obs.id}] [REASONING] ${decision}`] }
@@ -27612,7 +28317,11 @@ Entity: ${entityName} | ${facts.length} facts | ${obs.tokens} tokens${reasoningA
       const minCount = threshold ?? 2;
       let entries;
       try {
-        entries = await auditProjectObservations(project.id, await withFreshIndex(() => getAllObservations()), minCount);
+        entries = await auditProjectObservations(
+          project.id,
+          await withFreshIndex(() => filterReadableObservations(getAllObservations(), getObservationReader())),
+          minCount
+        );
       } catch (err) {
         return {
           content: [{
@@ -27677,7 +28386,8 @@ Entity: ${entityName} | ${facts.length} facts | ${obs.tokens} tokens${reasoningA
         limit: safeLimit,
         type: "reasoning",
         projectId: scope === "global" ? void 0 : project.id,
-        status: "active"
+        status: "active",
+        reader: getObservationReader(scope === "global" ? "global" : "project")
       }));
       if (result.entries.length === 0) {
         return {
@@ -27702,7 +28412,11 @@ ${result.formatted}` }]
     },
     async ({ query, dryRun }) => {
       const { getAllObservations: getAllObservations2, resolveObservations: resolveObservations2 } = await Promise.resolve().then(() => (init_observations(), observations_exports));
-      const allObs = await withFreshIndex(() => getAllObservations2().filter((o) => (o.status ?? "active") === "active" && o.projectId === project.id));
+      const reader = getObservationReader();
+      const allObs = await withFreshIndex(() => filterReadableObservations(
+        getAllObservations2().filter((o) => (o.status ?? "active") === "active" && o.projectId === project.id),
+        reader
+      ).filter((observation) => canManageObservation(observation, reader)));
       if (allObs.length < 2) {
         return { content: [{ type: "text", text: "Not enough active memories to deduplicate." }] };
       }
@@ -27716,7 +28430,7 @@ ${result.formatted}` }]
       }
       let candidates;
       if (query) {
-        const searchResult = await compactSearch({ query, limit: 20, projectId: project.id, status: "active" });
+        const searchResult = await compactSearch({ query, limit: 20, projectId: project.id, status: "active", reader });
         const idSet = new Set(searchResult.entries.map((e) => e.id));
         candidates = allObs.filter((o) => idSet.has(o.id));
       } else {
@@ -27806,7 +28520,8 @@ ${actions.join("\n")}`
         safeAnchor,
         project.id,
         safeBefore,
-        safeAfter
+        safeAfter,
+        getObservationReader()
       );
       return {
         content: [
@@ -27840,12 +28555,14 @@ ${actions.join("\n")}`
       const safeTypedRefs = coerceStringArray(typedRefs);
       let result;
       try {
+        const hasCrossProjectRef = safeRefs.some((ref) => ref.projectId && ref.projectId !== project.id) || safeTypedRefs.some((ref) => ref.includes("@") && !ref.endsWith(`@${project.id}`));
+        const reader = getObservationReader(hasCrossProjectRef ? "global" : "project");
         if (safeTypedRefs.length > 0) {
-          result = await compactDetail(safeTypedRefs);
+          result = await compactDetail(safeTypedRefs, { reader });
         } else if (safeRefs.length > 0) {
-          result = await compactDetail(safeRefs);
+          result = await compactDetail(safeRefs, { reader });
         } else {
-          result = await compactDetail(safeIds.map((id) => ({ id, projectId: project.id })));
+          result = await compactDetail(safeIds.map((id) => ({ id, projectId: project.id })), { reader });
         }
       } catch (err) {
         return { content: [{ type: "text", text: err instanceof Error ? err.message : String(err) }], isError: true };
@@ -27871,11 +28588,15 @@ ${actions.join("\n")}`
     },
     async (args) => {
       const action = args.action ?? "report";
-      const { getRetentionSummary: getRetentionSummary2, getArchiveCandidates: getArchiveCandidates2, rankByRelevance: rankByRelevance2, archiveExpired: archiveExpired2, getRetentionZone: getRetentionZone2, explainRetention: explainRetention2 } = await Promise.resolve().then(() => (init_retention(), retention_exports));
+      const { getRetentionSummary: getRetentionSummary2, getArchiveCandidates: getArchiveCandidates2, rankByRelevance: rankByRelevance2, getRetentionZone: getRetentionZone2, explainRetention: explainRetention2 } = await Promise.resolve().then(() => (init_retention(), retention_exports));
       const { getDb: getDb2 } = await Promise.resolve().then(() => (init_orama_store(), orama_store_exports));
       const { search: search2 } = await import("@orama/orama");
-      const { getAllObservations: getAllObservations2 } = await Promise.resolve().then(() => (init_observations(), observations_exports));
-      const allObs = await withFreshIndex(() => getAllObservations2());
+      const { getAllObservations: getAllObservations2, resolveObservations: resolveObservations2 } = await Promise.resolve().then(() => (init_observations(), observations_exports));
+      const reader = getObservationReader();
+      const allObs = await withFreshIndex(() => filterReadableObservations(
+        getAllObservations2().filter((observation) => observation.projectId === project.id),
+        reader
+      ));
       const accessMap = /* @__PURE__ */ new Map();
       try {
         const database = await getDb2();
@@ -27892,20 +28613,6 @@ ${actions.join("\n")}`
         }
       } catch {
       }
-      if (action === "archive") {
-        const result = await archiveExpired2(projectDir2, void 0, accessMap, project.id);
-        if (result.archived === 0) {
-          return {
-            content: [{ type: "text", text: "[OK] No expired observations to archive. All memories are within their retention period." }]
-          };
-        }
-        return {
-          content: [{ type: "text", text: `[ARCHIVED] Archived ${result.archived} expired observations (status set to 'archived' in-place)
-${result.remaining} active observations remaining.
-
-Archived memories are hidden from default search but can be found with status: "all".` }]
-        };
-      }
       const docs = allObs.map((obs) => ({
         id: `obs-${obs.id}`,
         observationId: obs.id,
@@ -27924,13 +28631,34 @@ Archived memories are hidden from default search but can be found with status: "
         status: obs.status ?? "active",
         source: obs.source ?? "agent",
         sourceDetail: obs.sourceDetail ?? "",
-        valueCategory: obs.valueCategory ?? ""
+        valueCategory: obs.valueCategory ?? "",
+        admissionState: obs.admissionState ?? "",
+        admissionReason: obs.admissionReason ?? "",
+        visibility: obs.visibility ?? "project",
+        createdByAgentId: obs.createdByAgentId ?? "",
+        sharedWithAgentIds: JSON.stringify(obs.sharedWithAgentIds ?? [])
       }));
       if (docs.length === 0) {
         return {
           content: [{ type: "text", text: "No observations found for this project." }]
         };
       }
+      if (action === "archive") {
+        const managedIds = new Set(
+          allObs.filter((observation) => canManageObservation(observation, reader)).map((observation) => observation.id)
+        );
+        const candidates2 = getArchiveCandidates2(docs).filter((document) => managedIds.has(document.observationId));
+        if (candidates2.length === 0) {
+          return {
+            content: [{ type: "text", text: "[OK] No expired memories in this session's write scope to archive." }]
+          };
+        }
+        const result = await resolveObservations2(candidates2.map((document) => document.observationId), "archived");
+        return {
+          content: [{ type: "text", text: `[ARCHIVED] Archived ${result.resolved.length} expired observation(s) in this session's write scope.
+${Math.max(0, managedIds.size - result.resolved.length)} visible writable observations remaining.` }]
+        };
+      }
       if (action === "stale") {
         const staleDocs = docs.filter((d) => getRetentionZone2(d) === "stale");
         if (staleDocs.length === 0) {
@@ -28251,7 +28979,10 @@ Archived memories are hidden from default search but can be found with status: "
       const allObs = await withFreshIndex(() => getAllObservations2());
       const scoped = scopeKnowledgeGraphToProject(
         graph,
-        allObs.filter((observation) => observation.projectId === project.id)
+        filterReadableObservations(
+          allObs.filter((observation) => observation.projectId === project.id),
+          getObservationReader()
+        )
       );
       return { entities: scoped.entities, relations: scoped.relations };
     }
@@ -28526,7 +29257,10 @@ ${skill2.content}` }]
         };
       }
       const { getObservationStore: getStore } = await Promise.resolve().then(() => (init_obs_store(), obs_store_exports));
-      const allObs = await getStore().loadAll();
+      const allObs = filterReadableObservations(
+        (await getStore().loadAll()).filter((observation) => observation.projectId === project.id),
+        getObservationReader()
+      );
       const obsData = allObs.map((o) => ({
         id: o.id || 0,
         entityName: o.entityName || "unknown",
@@ -28625,7 +29359,11 @@ ${skill2.content}` }]
       }
       const { getAllObservations: getAllObservations2 } = await Promise.resolve().then(() => (init_observations(), observations_exports));
       const allObs = await withFreshIndex(() => getAllObservations2());
-      const matched = allObs.filter((o) => observationIds.includes(o.id));
+      const reader = getObservationReader();
+      const matched = filterReadableObservations(
+        allObs.filter((observation) => observation.projectId === project.id && observationIds.includes(observation.id)),
+        reader
+      );
       if (matched.length === 0) {
         return { content: [{ type: "text", text: `No observations found for IDs: [${observationIds.join(", ")}]. Use \`memorix_search\` to find valid IDs.` }], isError: true };
       }
@@ -28633,6 +29371,13 @@ ${skill2.content}` }]
       if (nonActive.length > 0) {
         return { content: [{ type: "text", text: `Cannot promote: ${nonActive.length} observation(s) are not active: ${nonActive.map((o) => `#${o.id} (${o.status})`).join(", ")}. Only active observations can be promoted to permanent knowledge.` }], isError: true };
       }
+      const nonProjectShared = matched.filter((observation) => resolveObservationVisibility(observation) !== "project");
+      if (nonProjectShared.length > 0) {
+        return {
+          content: [{ type: "text", text: `Cannot promote private or team-scoped observations: ${nonProjectShared.map((observation) => `#${observation.id}`).join(", ")}. Promote only deliberate project-shared knowledge.` }],
+          isError: true
+        };
+      }
       const skill2 = await promoteToMiniSkill2(projectDir2, project.id, matched, { trigger, instruction, tags });
       const lines = [
         `[OK] Created mini-skill #${skill2.id}`,
@@ -28760,7 +29505,6 @@ Ensure the path points to a directory containing a .git folder (or a subdirector
       const unresolved = requireResolvedProject("start a project session");
       if (unresolved) return unresolved;
       const { startSession: startSession2 } = await Promise.resolve().then(() => (init_session(), session_exports));
-      const result = await startSession2(projectDir2, project.id, { sessionId, agent });
       const llmStatus = isLLMEnabled() ? `LLM enhanced mode: ${getLLMConfig()?.provider}/${getLLMConfig()?.model} (fact extraction + auto-dedup active)` : "LLM mode: off (set MEMORIX_LLM_API_KEY to enable enhanced memory quality)";
       const shouldJoinTeam = !!joinTeam;
       let registeredAgent = null;
@@ -28791,8 +29535,11 @@ Ensure the path points to a directory containing a .git folder (or a subdirector
           const lastSeen = registeredAgent.last_seen_obs_generation;
           const store = getObservationStore();
           const currentGen = store.getGeneration();
-          const projectObs = await withFreshIndex(() => getAllObservations().filter(
-            (o) => o.projectId === project.id && (o.writeGeneration ?? 0) > lastSeen
+          const projectObs = await withFreshIndex(() => filterReadableObservations(
+            getAllObservations().filter(
+              (o) => o.projectId === project.id && (o.writeGeneration ?? 0) > lastSeen
+            ),
+            getObservationReader()
           ));
           const wm = computeWatermark2(lastSeen, currentGen, projectObs.length);
           if (wm.newObservationCount > 0) {
@@ -28814,6 +29561,11 @@ Ensure the path points to a directory containing a .git folder (or a subdirector
         }
       } catch {
       }
+      const result = await startSession2(projectDir2, project.id, {
+        sessionId,
+        agent,
+        reader: getObservationReader()
+      });
       const lines = [
         `[OK] Session started: ${result.session.id}`,
         `Project: ${project.name} (${project.id})`,
@@ -28936,7 +29688,7 @@ ${summary ? "Summary saved for next session context injection." : "No summary pr
     async ({ limit }) => {
       const safeLimit = limit != null ? coerceNumber(limit, 3) : 3;
       const { getSessionContext: getSessionContext2, listSessions: listSessions2 } = await Promise.resolve().then(() => (init_session(), session_exports));
-      const context = await getSessionContext2(projectDir2, project.id, safeLimit);
+      const context = await getSessionContext2(projectDir2, project.id, safeLimit, getObservationReader());
       const sessions = await listSessions2(projectDir2, project.id);
       const activeSessions = sessions.filter((s) => s.status === "active");
       const completedSessions = sessions.filter((s) => s.status === "completed");
@@ -28961,7 +29713,7 @@ ${summary ? "Summary saved for next session context injection." : "No summary pr
     "memorix_transfer",
     {
       title: "Transfer Memories",
-      description: 'Export or import project memories. Action "export": export observations and sessions (JSON or Markdown). Action "import": import from a JSON export (re-assigns IDs, skips duplicate topicKeys).',
+      description: 'Export or import project memories. Action "export": export observations visible to the current agent and project sessions (JSON or Markdown). Action "import": import from a JSON export (re-assigns IDs, skips duplicate topicKeys).',
       inputSchema: {
         action: z2.enum(["export", "import"]).describe("Operation: export or import"),
         format: z2.enum(["json", "markdown"]).optional().describe("Export format (for export, default: json)"),
@@ -28972,10 +29724,10 @@ ${summary ? "Summary saved for next session context injection." : "No summary pr
       if (action === "export") {
         const { exportAsJson: exportAsJson2, exportAsMarkdown: exportAsMarkdown2 } = await Promise.resolve().then(() => (init_export_import(), export_import_exports));
         if (format === "markdown") {
-          const md = await exportAsMarkdown2(projectDir2, project.id);
+          const md = await exportAsMarkdown2(projectDir2, project.id, getObservationReader());
           return { content: [{ type: "text", text: md }] };
         }
-        const data = await exportAsJson2(projectDir2, project.id);
+        const data = await exportAsJson2(projectDir2, project.id, getObservationReader());
         const json = JSON.stringify(data, null, 2);
         return {
           content: [{
@@ -29172,8 +29924,6 @@ ${json}
       }
     }
   );
-  let teamStore;
-  let initTeamStoreForProject;
   if (teamFeaturesEnabled) {
     const { initTeamStore: initTeamStore2 } = await Promise.resolve().then(() => (init_team_store(), team_store_exports));
     initTeamStoreForProject = initTeamStore2;
@@ -29446,7 +30196,7 @@ ${lines.join("\n")}` }] };
       description: `Send, broadcast, or read messages between agents. Durable: messages survive restarts and reach inactive recipients. Action "send": direct message to one agent. Action "broadcast": message all agents. Action "inbox": read this agent's inbox.`,
       inputSchema: {
         action: z2.enum(["send", "broadcast", "inbox"]).describe("Operation to perform"),
-        from: z2.string().optional().describe("Sender agent ID (for send/broadcast)"),
+        from: z2.string().optional().describe("Your sender agent ID. Omit it to use this session identity."),
         to: z2.string().optional().describe("Receiver agent ID (for send)"),
         type: z2.enum(["request", "response", "info", "announcement", "contract", "error", "handoff"]).optional().describe("Message type (for send/broadcast)"),
         content: z2.string().optional().describe("Message content (for send/broadcast)"),
@@ -29457,13 +30207,20 @@ ${lines.join("\n")}` }] };
       }
     },
     async ({ action, from, to, type: msgType, content, agentId, markRead, toRole, handoffStatus }) => {
+      const requireCurrentTeamAgent = () => {
+        if (!currentAgentId) return null;
+        const agent = teamStore.getAgent(currentAgentId);
+        return agent?.project_id === project.id && agent.status === "active" ? agent : null;
+      };
       if (action === "send") {
-        if (!from || !msgType || !content) return { content: [{ type: "text", text: "[ERROR] from, type, and content required for send" }], isError: true };
+        const sender = requireCurrentTeamAgent();
+        if (!sender || !msgType || !content) return { content: [{ type: "text", text: "[ERROR] active session identity, type, and content required for send" }], isError: true };
+        if (from && from !== currentAgentId) return { content: [{ type: "text", text: "[ERROR] from must match the current session identity" }], isError: true };
         if (!to && !toRole) return { content: [{ type: "text", text: "[ERROR] either to (agent ID) or toRole is required for send" }], isError: true };
         if (content.length > 1e4) return { content: [{ type: "text", text: "[ERROR] Message too large (max 10KB)" }], isError: true };
         const msg = teamStore.sendMessage({
           projectId: project.id,
-          senderAgentId: from,
+          senderAgentId: currentAgentId,
           recipientAgentId: to ?? null,
           type: msgType,
           content,
@@ -29475,11 +30232,13 @@ ${lines.join("\n")}` }] };
         return { content: [{ type: "text", text: `Message sent (${msgType}) to ${target} | ID: ${msg.id.slice(0, 8)}\u2026${toRole ? ` [role: ${toRole}]` : ""}` }] };
       }
       if (action === "broadcast") {
-        if (!from || !msgType || !content) return { content: [{ type: "text", text: "[ERROR] from, type, and content required for broadcast" }], isError: true };
+        const sender = requireCurrentTeamAgent();
+        if (!sender || !msgType || !content) return { content: [{ type: "text", text: "[ERROR] active session identity, type, and content required for broadcast" }], isError: true };
+        if (from && from !== currentAgentId) return { content: [{ type: "text", text: "[ERROR] from must match the current session identity" }], isError: true };
         if (content.length > 1e4) return { content: [{ type: "text", text: "[ERROR] Message too large (max 10KB)" }], isError: true };
         const msg = teamStore.sendMessage({
           projectId: project.id,
-          senderAgentId: from,
+          senderAgentId: currentAgentId,
           recipientAgentId: null,
           type: msgType,
           content
@@ -29487,8 +30246,12 @@ ${lines.join("\n")}` }] };
         if ("error" in msg) return { content: [{ type: "text", text: `[ERROR] ${msg.error}` }], isError: true };
         return { content: [{ type: "text", text: `Broadcast (${msgType}) | ID: ${msg.id.slice(0, 8)}\u2026` }] };
       }
-      const inboxId = agentId || from || "";
-      if (!inboxId) return { content: [{ type: "text", text: "[ERROR] agentId required for inbox" }], isError: true };
+      const inboxAgent = requireCurrentTeamAgent();
+      if (!inboxAgent) return { content: [{ type: "text", text: "[ERROR] active session identity required for inbox" }], isError: true };
+      if (agentId && agentId !== currentAgentId || from && from !== currentAgentId) {
+        return { content: [{ type: "text", text: "[ERROR] inbox access is limited to the current session identity" }], isError: true };
+      }
+      const inboxId = currentAgentId;
       const inbox = teamStore.getInbox(project.id, inboxId);
       const unread = teamStore.getUnreadCount(project.id, inboxId);
       if (inbox.length === 0) return { content: [{ type: "text", text: "Inbox empty" }] };
@@ -29516,24 +30279,34 @@ ${lines.join("\n")}` }] };
     },
     async ({ agentId, markInboxRead }) => {
       const { computeWatermark: computeWatermark2, computePoll: computePoll2 } = await Promise.resolve().then(() => (init_poll(), poll_exports));
+      if (agentId && agentId !== currentAgentId) {
+        return {
+          content: [{ type: "text", text: "[ERROR] agentId must match the current session identity." }],
+          isError: true
+        };
+      }
+      const effectiveAgentId = currentAgentId;
       let watermark = computeWatermark2(0, 0, 0);
-      if (agentId) {
-        const agent = teamStore.getAgent(agentId);
+      if (effectiveAgentId) {
+        const agent = teamStore.getAgent(effectiveAgentId);
         if (agent) {
           const lastSeen = agent.last_seen_obs_generation;
           const store = getObservationStore();
           const currentGen = store.getGeneration();
-          const projectObs = await withFreshIndex(() => getAllObservations().filter(
-            (o) => o.projectId === project.id && (o.writeGeneration ?? 0) > lastSeen
+          const projectObs = await withFreshIndex(() => filterReadableObservations(
+            getAllObservations().filter(
+              (o) => o.projectId === project.id && (o.writeGeneration ?? 0) > lastSeen
+            ),
+            getObservationReader()
           ));
           watermark = computeWatermark2(lastSeen, currentGen, projectObs.length);
-          teamStore.updateWatermark(agentId, currentGen);
-          teamStore.heartbeat(agentId);
+          teamStore.updateWatermark(effectiveAgentId, currentGen);
+          teamStore.heartbeat(effectiveAgentId);
         }
       }
-      const poll = computePoll2(teamStore, project.id, agentId ?? null, watermark);
-      if (markInboxRead && agentId) {
-        teamStore.markAllRead(project.id, agentId);
+      const poll = computePoll2(teamStore, project.id, effectiveAgentId ?? null, watermark);
+      if (markInboxRead && effectiveAgentId) {
+        teamStore.markAllRead(project.id, effectiveAgentId);
       }
       const lines = [];
       if (poll.agent) {
@@ -29593,7 +30366,7 @@ ${lines.join("\n")}` }] };
     "memorix_handoff",
     {
       title: "Team Handoff \u2014 Agent Context Transfer",
-      description: "Create a structured handoff artifact when passing work to another agent. The handoff is stored as a durable observation (searchable, immune to archival) and a notification message is sent to the recipient. Use this when completing a task and another agent should continue, or when you want to leave context for whoever works on this next.",
+      description: "Create a structured handoff artifact when passing work to another agent. A targeted handoff is visible only to its sender and recipient; a broadcast handoff is team-visible. The handoff is stored as a durable observation (immune to archival) and a notification message is sent to the recipient. Use this when completing a task and another agent should continue, or when you want to leave context for whoever works on this next.",
       inputSchema: {
         fromAgentId: z2.string().describe("Your agent ID (from team_manage join or session_start with joinTeam=true)"),
         summary: z2.string().describe("Human-readable summary of what you did and what needs to happen next"),
@@ -29606,6 +30379,34 @@ ${lines.join("\n")}` }] };
     },
     async ({ fromAgentId, summary, context, toAgentId, taskId, filesModified, concepts }) => {
       const { createHandoffArtifact: createHandoffArtifact2 } = await Promise.resolve().then(() => (init_handoff(), handoff_exports));
+      if (!currentAgentId) {
+        return {
+          content: [{ type: "text", text: "Create a coordination identity first: call memorix_session_start with joinTeam=true." }],
+          isError: true
+        };
+      }
+      if (fromAgentId !== currentAgentId) {
+        return {
+          content: [{ type: "text", text: "fromAgentId must match the identity returned for this session. Memorix will not create a handoff on behalf of another agent." }],
+          isError: true
+        };
+      }
+      const sender = teamStore.getAgent(currentAgentId);
+      if (!sender || sender.project_id !== project.id || sender.status !== "active") {
+        return {
+          content: [{ type: "text", text: "The current coordination identity is not an active member of this project." }],
+          isError: true
+        };
+      }
+      if (toAgentId) {
+        const recipient = teamStore.getAgent(toAgentId);
+        if (!recipient || recipient.project_id !== project.id) {
+          return {
+            content: [{ type: "text", text: "The handoff recipient must be an agent registered in the current project." }],
+            isError: true
+          };
+        }
+      }
       const result = await createHandoffArtifact2(
         {
           projectId: project.id,