Module principal_plane 

A memory handle pinned to one principal’s PRIVATE plane (RFC 7141).

An agent session owned by a principal receives its memory through this wrapper: every ordinary Memory operation the session’s tools and loop issue is routed to the backend’s *_for_principal form with the owner’s composite scope, so a scoped session can neither read nor write the shared plane, and nothing it stores is visible to legacy callers. A backend that has not implemented principal scoping fails every operation closed through the trait defaults, which is the intended posture until it does. Operations with no private-plane meaning (agent-wide maintenance, consolidation, superseding, renames) refuse rather than fall through.

The wrapper is deliberately not an authorization mechanism: the session owner was authorized before the handle was built, and the storage predicates carry the owner on every statement.

Structs

PrincipalPlaneMemory

A Memory handle whose ordinary operations act on one principal’s private plane.