Cross-Agent Memory stores shared memory as ordinary repository files. It does not encrypt, redact, upload, or access-control those files.

Assume every committed memory entry is visible to everyone who can read the repository. In a public repository, it is public.

Never store:

• API keys, tokens, passwords, cookies, private keys, or signed URLs;
• raw client-native memory directories or chat transcripts;
• customer records, unnecessary personal data, or confidential incident logs;
• absolute paths to private native-memory stores.

The memory and handoff validators detect a small set of common credential patterns. They are guardrails, not complete secret scanners. Use repository secret scanning or a dedicated tool such as Gitleaks before publication.

Please use GitHub's private security advisory flow for the repository. Do not include working credentials or private project memory in a public issue.