FID-071
Confidential Agent Memory and Cross-Context Disclosure
How do persistent memory, summaries, retrieval stores, tool traces, delegation, and exports cause confidential context to influence or leak into unrelated sessions, roles, tasks, or organizations? Which technical controls make purpose limitation, deletion, and revocation testable?
Why this matters
The question behind the brief.
Faith communities may handle prayer requests, pastoral correspondence, education records, donor information, internal deliberations, and information about people who never directly interact with an AI system. These contexts are often relational and purpose-specific. Persistent agents can silently carry information from one setting into another even when no one intentionally shares it, undermining confidentiality and institutional trust.
Metadata
How to place this idea.
Ways to help
Move this from question to evidence.
Build memory, retrieval, and tool-use evaluation harnesses.
Review scenarios from privacy engineering, pastoral confidentiality, education, nonprofit operations, and data-governance practice.
Develop synthetic data generators and leakage metrics.
Contribute threat modeling and responsible disclosure expertise.
Contribute