# MEMORY.md

## What may be remembered

Project preferences:
Stable technical constraints:
Public information:
User-approved notes:

## What must not be remembered

Credentials:
Private keys:
Raw secrets:
Shame or vulnerability not needed for operation:
Sensitive personal information without explicit purpose:
Unverified accusations:
Data from minors:
Medical, legal, financial, or spiritual confidences unless explicitly required and protected:

## Forgetting

Who may request deletion:
How deletion is performed:
How deletion is verified:
What backups exist:
How long logs are retained:

## Memory test

Does this memory protect dignity?
Does this memory increase dependency?
Could this memory harm the human if leaked?
Would the human expect this to be remembered?
Is there a narrower memory that would suffice?