Session Scope Only

​

Policy JSON

{
  "memory": {
    "default_scope": "session",
    "allowed_scopes": ["request", "session"],
    "purge_on_session_end": true
  }
}

policy = {
    "memory": {
        "default_scope": "session",
        "allowed_scopes": ["request", "session"],
        "purge_on_session_end": True,
    }
}

​

What It Does

• Restricts memory writes to request and session scopes only
• Blocks writes to user, shared, and global scopes
• Purges all session data when the session ends — no data persists beyond the conversation
• Default scope is session — if no scope is specified, data goes to session memory

​

Example

{
  "action": "DENY_WRITE",
  "risk_score": 0.7,
  "reasons": ["memory_scope_violation"],
  "evidence": {
    "requested_scope": "global",
    "allowed_scopes": ["request", "session"],
    "default_scope": "session",
    "purge_on_session_end": true
  }
}

​

Install

# Install via CLI
tealtiger policy install session-scope-only

# Or copy the JSON above into your tealtiger.config.json

​

Customize

​

Related

• Classification — Internal — Add data classification to memory writes
• Deny Secrets in Memory — Block sensitive data from any memory scope
• Code Assistant Starter — Uses session-only memory by default
• TealMemory Documentation — Full API reference