AMU adds lineage gating to shared agent memory: column-level authorization zeroes cross-department leakage while keeping most memory reuse
The authors introduce the Analytical Memory Unit (AMU), a memory schema that attaches a full derivation (lineage) graph to every cached result and gates retrieval so a hit is served only when the requester is authorized for every column touched; under complete lineage recording they prove a safety guarantee by construction, and six experiments show lineage-gated retrieval removes the cross-department leakage of content-gated memory at a modest reuse cost, with zero leaks over 9 round-trips in a real-agent integration.