The Book of Memory

What a civilization chooses to remember

Memory is how Stygia remains answerable to its own past. This Book treats a record as precious without treating repetition as truth. It makes room for context, dissent, correction, privacy, and the dignity of people whose lives may be described by a system they did not build.

The next step is practical: see how memories become Decision Records, where a future reader can understand not just what happened but why it mattered.

Purpose

Defines how Stygia preserves decisions, observations, events, lessons, corrections, and institutional history without confusing recorded memory with verified truth.

Architect-review operating model

MEM-R016: A memory record SHALL identify epistemic class, source, time, authority, uncertainty, correction state, access scope, and retention basis.
MEM-R017: Memory retrieval SHALL preserve context, dissent, protected fields, and the distinction between record and verified fact.
MEM-R018: Correction, supersession, and deletion SHALL preserve accountability, legal hold, and restoration evidence.
MEM-R019: This Draft SHALL NOT operate a live archive, alter retention, or disclose private memory.

Interpretation cases: Conforming preserves source and uncertainty; Prohibited treats repetition as truth; Boundary records an unverified account; Failure pauses historical claims; Loophole erases dissent through supersession; Misuse exposes protected fields; Care-control supports dignity and correction.

Foundational principles

Memory is evidence, not automatic fact.
Historical records must preserve provenance and context.
Corrections append to history rather than silently replacing it.
Material decisions must remain explainable after the systems and models that made them have been retired.
Retention must balance continuity, privacy, security, legal obligations, and operational value.
Sensitive memory requires classification, access control, and auditable use.

Planned sections

Memory classes
Event and decision records
Source provenance
Confidence and verification state
Retention schedules
Privacy and minimization
Correction and annotation
Archival formats
Search and retrieval controls
Institutional lessons
Historical reconstruction
Destruction and legal hold

Memory classes

Observation: A recorded event or input.
Assertion: A claim made by a source.
Finding: A conclusion supported by stated evidence.
Decision: An authorized selection among alternatives.
Lesson: A generalized conclusion derived from reviewed outcomes.
Canon: A ratified statement governing terminology, identity, or history.

Provenance and retention controls

Every consequential memory record shall preserve its source, creator, creation time, digest, verification state, confidence, access classification, retention state, and supersession relationship. Memory may preserve uncertainty and dissent, but it shall not turn an assertion into fact merely through repetition. Corrections append an attributable annotation and never erase the earlier record. Destruction requires an approved retention decision, legal-hold check, and durable destruction evidence.

Archival copies shall preserve format, digest, custody events, restoration checks, and limitations. A restored copy is evidence of continuity, not automatic authority. Retrieval shall enforce classification, purpose, and least privilege, and every consequential access shall remain auditable.

Examples and failure handling

A finding with conflicting sources remains a finding with visible conflict and confidence limits. A missing source is Unknown, an inaccessible source is Unavailable, and a field that does not apply is Not-applicable; these states shall not be collapsed. A failed restoration, altered digest, expired retention authority, or unresolved legal hold blocks deletion or dependent use.

Memory record minimum

Consequential memory shall identify class, subject, creator, source inputs, event or decision time, digest, provenance state, confidence, access classification, retention and legal-hold state, correction history, and supersession. A memory record may explain a decision but cannot itself amend authority.

Retrieval and correction

Search and retrieval shall preserve access purpose, result scope, source limitations, and material dissent. Corrections append the reason, reviewer, affected claims, and replacement relationship. Compression or summarisation shall retain links to the underlying record and shall not silently become the historical source of truth.

Normative clauses

MEM-R006: Every consequential memory record shall state its class, subject, source inputs, creator, event or decision time, provenance state, confidence, access classification, retention state, and supersession relationship.
MEM-R007: A memory record shall distinguish recorded observation, source assertion, finding, decision, lesson, and canon. Recording or repeating a claim shall not change its epistemic class.
MEM-R008: Memory shall preserve material context, dissent, uncertainty, and limitations needed to explain later use. A summary shall link to its source record and shall not silently replace it.
MEM-R009: Corrections, annotations, and supersession shall append attributable events identifying the reason, reviewer, affected claims, effective time, and dependants. Earlier evidence shall remain discoverable subject to lawful deletion and access controls.
MEM-R010: Retrieval shall enforce purpose limitation, least privilege, sensitivity classification, and legal or policy restrictions. Consequential access shall record the requester, purpose, scope, result disposition, and review outcome.
MEM-R011: Retention and deletion decisions shall identify the applicable rule, legal-hold result, affected records, authorised decision, execution evidence, and residual metadata retained for accountability.
MEM-R012: Memory export, migration, compression, or restoration shall preserve identifiers, provenance links, digests where applicable, access classification, limitations, and a record of the transformation.
MEM-R013: A memory record shall not be used to create identity, consent, constitutional authority, access rights, or permission that is absent from the governing authority.
MEM-R014: Lessons shall identify the reviewed outcomes, evidence scope, assumptions, dissent, applicability limits, and whether the lesson is advisory or binding under a separate authority.
MEM-R015: Historical reconstruction shall label inferred, estimated, contested, unavailable, and unknown elements, preserve alternative reconstructions where material, and identify the evidence that could change the account.

Archival validation boundaries

Archival memory remains evidence rather than automatic truth:

MEM-R001: An archival memory record shall identify its source scope, format, digest, custody events, retention and legal-hold state, readability result, restoration result, and limitations.
MEM-R002: Readability, restoration, and format migration shall be recorded as distinct events. A restored or migrated copy shall retain a link to the earlier record and shall not silently become the historical source.
MEM-R003: Partial, unreadable, altered, unavailable, or conflicting archival evidence shall remain explicit and shall block dependent historical claims until reviewed.
MEM-R004: Archival validation shall preserve failed exercises, missing material, dissent, and the bounded review disposition. Technical success does not establish authority, truth, or consent.
MEM-R005: Destruction, retention change, or legal-hold release shall not rely on a failed or incomplete archival validation and shall preserve durable decision evidence.

Design evidence

Memory design review should map each class to its source, provenance, access purpose, retention basis, correction path, legal-hold state, transformation history, retrieval controls, and restoration test. Reviewers should test whether a later user can distinguish source evidence from summary, inference, or decision and whether deletion or minimisation preserves the required accountability record.