Default trust policies keyed by source type. Encoded into a new
MemoryTrace.policy at creation time so a memory's policy reflects how
it was originally produced, not how it was later retrieved.
Trust ranking summary:
identity_provider / system_config / human_approval / tool_result
→ full trust (authorize + personalize + fact-claim).
retrieved_document / fact_graph / external_api
→ fact-claim only; reverify periodically.
user_statement / agent_inference / observation / reflection /
typed_network / memory_summary
→ personalization only; never grant auth or stand as a fact.
external
→ catch-all; conservative defaults (no auth, no fact-claim).
Default trust policies keyed by source type. Encoded into a new
MemoryTrace.policyat creation time so a memory's policy reflects how it was originally produced, not how it was later retrieved.Trust ranking summary: identity_provider / system_config / human_approval / tool_result → full trust (authorize + personalize + fact-claim). retrieved_document / fact_graph / external_api → fact-claim only; reverify periodically. user_statement / agent_inference / observation / reflection / typed_network / memory_summary → personalization only; never grant auth or stand as a fact. external → catch-all; conservative defaults (no auth, no fact-claim).