grant
Give another agent read access to a subset of this store's memories via exact selectors, and record the act for audit. Use scope, tag, key, or ids; revoke later.
Instructions
Give another agent READ access to a SUBSET of this store's memories, and record the act.
Pass EXACTLY ONE selector: scope (a memory's meta scope), tag, key (a supersession key), or ids
(explicit record ids). Membership is exact-match on a stored field -- no embedder, no similarity
threshold, no LLM -- so the set a grant authorises is the same tomorrow as it is today. There is no
query selector on purpose: a grant whose membership came from a similarity score would silently widen
after a re-embed or a corpus change.
by names the granting agent (a grant issued by an agent covers only records THAT agent owns; omit it
for an operator-wide grant). Read with recall_as(agent, ...), end it with revoke(...). Both acts
land in the write-receipt chain, so grant_log() and the audit bundle show who could read what, and
when it was withdrawn. Passing no selector is refused rather than read as "everything".
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| by | No | ||
| ids | No | ||
| key | No | ||
| tag | No | ||
| note | No | ||
| agent | Yes | ||
| scope | No |