AI 中文总结
本研究针对个人语言代理在跨受众记忆生命周期中的授权问题，提出基于受众划分与显式授权的准入机制，通过排除法确保情境组装安全，并在多架构验证中实现零违规与更优召回。
AI 中文摘要
一个代表其所有者在私人和共享对话中行动的个人语言代理，可以从一个受众那里学习到一个事实，并随后将其放入为另一个受众组装的情境中。我们在整个记忆生命周期中研究情境之前的授权。每个记忆项都携带其记录时在场的受众；派生项按受众划分，接收其来源受众的交集，或被抑制；受众仅通过明确的、针对对象的授权而扩大；并且只有当每个当前查看者都属于其授权受众之一时，项才进入模型尝试，未解决的查看者以公开仅限的方式失败关闭。在显式身份、来源和完全中介假设下，这种准入在精确组装的情境上是健全且策略完备的，通过排除而非模型行为来强制执行。我们在两个独立持久化的参考架构中实现它：一个扁平存储和一个关系图，并在描述性上，在一个原生代理记忆运行时中实现。在对10,000个多方历史的前瞻性冻结确认中，没有禁止项进入任何架构的情境，而无范围检索在其82%的情境中暴露了禁止项。有权限的召回与策略等效基线完全匹配，并超过无范围检索0.30 Recall@5，具有Holm确认的优势，且随干扰项增加而增长。没有架构产生错误主体替换，但无范围替换过于罕见，无法建立预先指定的联合决策。
英文摘要
A personal language agent that acts for its owner across private and shared conversations can learn a fact from one audience and later place it in the context it assembles for another. We study authorization before context across the whole memory lifecycle. Each memory item carries the audience present when it was recorded; derived items are partitioned by audience, receive the intersection of their sources' audiences, or are suppressed; an audience widens only by an explicit, object-specific grant; and an item enters a model attempt only when every current viewer belongs to one of its authorized audiences, with unresolved viewers failing closed to public-only. Under explicit identity, provenance and complete-mediation assumptions, this admission is sound and policy-complete on the exact assembled context, enforced by exclusion rather than by model behavior. We realize it in two independently persisted reference architectures, a flat store and a relationship graph, and, descriptively, in a native agent-memory runtime. In a prospectively frozen confirmation over 10,000 multi-party histories, no forbidden item entered any architecture's context, whereas unscoped retrieval exposed forbidden items in 82% of its contexts. Entitled recall matched policy-equivalent baselines exactly and exceeded unscoped retrieval by 0.30 Recall@5, with a Holm-confirmed advantage that grows with distractors. No architecture produced a wrong-principal substitution, but unscoped substitutions were too rare to establish the prespecified joint decision.
Comments23 pages, 6 figures, 15 tables. Includes technical appendices and an ancillary research artifact
