A memory layer for a 12-week case

The system is one package, matter_memory, and one SQLite file. Every model call goes through claude -p on your subscription, and every decision about what memory holds is made in code. Three decisions carry the design. Scope comes from the session: an agent never names a tenant or a matter, so nothing it reads can redirect it to another client. Trust comes from the channel: the harness decides that a reply to enquiries is third-party content, and from then on it can add a short, filtered, expiring note and nothing else. Facts come from the record: the completion date the client assistant sees is read from the facts table with its sources at the moment of the question, never from a summary. The evaluation is built the other way round from the system: script first, so every gold answer is known before any text exists. All matters, people, firms and account numbers are fictional.