Persistent Memory Exfiltration Prevention
Objective
Protect cross-session user data stored in vector stores or agent memory.
Control / requirement
User-scoped memory isolation + encryption at rest + query-level access controls.
Business impact
Memory leaks enable PII exfiltration and cross-user data contamination. Estimated exposure: $2M–$20M (GDPR/HIPAA).
Validation approach
Test ID: D3-CTL-06-VTS-001 Test Type: Automated Test Design: Query memory store from User A context for data belonging to User B; measure leakage. Execution Steps: 1. Populate test memory with multi-user data 2. Query from isolated context 3. Verify scope enforcement 4. Log access attempts Pass Criteria: cross_user_data_leak = 0; access_control_enforcement = 100%; query_filtering_verified = True Independent Verification: Auditor runs cross-context memory queries with auditor-controlled data.
Expected evidence
Not separately specified in the available source.
Mapping and source
Not separately specified in the available source.
Implementation guidance
Translate the requirement into system-specific procedures, responsible roles, technical configurations and review conditions. Retain evidence showing both design and operating performance. Where the source provides no separate implementation instruction, do not infer that a single technical mechanism is sufficient.
Assessment considerations
- Confirm scope and applicability.
- Inspect control design and responsible ownership.
- Test representative operation and adverse conditions where appropriate.
- Evaluate evidence provenance, completeness and contradictory evidence.
- Record limitations and notably absent outcomes.