No Memory of Its Own: Governing a Visiting Agent on Sovereign Data

The problem is cross-organization data sharing in the agentic era: one organization must let another’s agent work over its most sensitive data...memory is a service of the agentic operating system, not a possession of the agent. When the memory of the visit belongs to the host rather than to the visitor, the data room can be rebuilt for agents. The rebuilt room is an agentic data enclave.