GAISSF / D3 / D3-CTL-06

Persistent Memory Exfiltration Prevention

Objective

Protect cross-session user data stored in vector stores or agent memory.

Control / requirement

User-scoped memory isolation + encryption at rest + query-level access controls.

Business impact

Memory leaks enable PII exfiltration and cross-user data contamination. Estimated exposure: $2M–$20M (GDPR/HIPAA).

Validation approach

Test ID: D3-CTL-06-VTS-001 Test Type: Automated Test Design: Query memory store from User A context for data belonging to User B; measure leakage. Execution Steps: 1. Populate test memory with multi-user data 2. Query from isolated context 3. Verify scope enforcement 4. Log access attempts Pass Criteria: cross_user_data_leak = 0; access_control_enforcement = 100%; query_filtering_verified = True Independent Verification: Auditor runs cross-context memory queries with auditor-controlled data.

Expected evidence

Not separately specified in the available source.

Mapping and source

Not separately specified in the available source.

Implementation guidance

Translate the requirement into system-specific procedures, responsible roles, technical configurations and review conditions. Retain evidence showing both design and operating performance. Where the source provides no separate implementation instruction, do not infer that a single technical mechanism is sufficient.

Assessment considerations

  • Confirm scope and applicability.
  • Inspect control design and responsible ownership.
  • Test representative operation and adverse conditions where appropriate.
  • Evaluate evidence provenance, completeness and contradictory evidence.
  • Record limitations and notably absent outcomes.