Every note that touches trust boundaries, newest first.
Persistent memory can carry influence across agent runs. An SGL decision map separates storage, provenance, retrieval, authority, and recovery so one session boundary does not bear the entire security model.
