Australian government demo spine
Security and privacy (AU)
Local-first memory fabric with honest boundaries. Not a foreign multi-tenant memory SaaS.
Principles
- Local-first data plane Memory stays in your process / your host volume — not a shadow cloud tenancy.
- Lab vs product Lab defaults are not protective. Product path refuses repository-known keys.
- Forget honesty channels_run / channels_skipped; backups remain operator-owned.
- Sister gates STRATAM mechanisms → MLSB security/utility → VOROR ops.
- No foreign agent mint Agents bootstrap with local keys for government demos.
Security angle (what assessors should see)
- Write-time controls — authorization before store; not a retrieval-only filter an injection can skip.
- Memory provenance — hash-chained, signed provenance log outside the mutable record; content hashes verified on integrity check.
- Attested elevated sources — tools/system channels can require registered attestation (product path).
- Isolation — server-side scope enrollment; cross-principal leak is fail-closed.
- Poison quarantine — corroboration gate + trust priors; consolidation cannot launder low-trust into high trust.
- Honest forget — channels_run / channels_skipped; no silent "GDPR complete."
- Group / prospective extensions — multi-party speaker attribution and deferred intentions with hardened ownership.
Full table: Security model.
Assessor quick answers
| Question | Answer |
|---|
| Where is data stored? | In-process fabric; durable path is host-configured. |
| Who has keys? | Host KMS inject via product_fabric / STRATAM_KMS_*. |
| Can we forget? | Logical + product crypto path; replicas out-of-band (documented). |
| Independent security measure? | Pinned MLSB evaluation bags (UNIT). Same-lab unless G8-signed independent review; depth probes are exploratory (citable: false). |
| Certifications? | None claimed for STRATAM itself. Host/deployer SOC2/HIPAA (or equivalent) are separate and not inherited from the library. |
10-minute demo script
- Cold open — positioning: local fabric, not foreign memory SaaS.
- Security model: storage-time controls — authorization, provenance,
isolation, poison quarantine.
- Privacy AU: residency, custody, and the honesty table above.
- Live: product_fabric remember/recall,
verify_integrity()
(including a tamper flip caught live), then forget — with
channels_run / channels_skipped shown, not summarised.
python examples/depth_extensions_demo.py — GM + PM.- Close: you own keys, residency, and evaluation pins.
Contact: security@stratam.io