---
id: MEM-8
family: GR-MEM
level: core
profiles: [storage-api, runtime]
posture: normative-target
added: "1.0"
changed: "1.0"
source: https://flowdrop.io/spec/rules/gr-mem/mem-8
specification: FlowDrop Workflow Specification 1.0-draft
licence: CC BY 4.0
---

# MEM-8 — A session's memory principal is its owner or nobody

*GR-MEM (Part I) · level: core · profiles: storage-api, runtime · added in 1.0*

Memory follows the conversation, not whoever happens to be driving it this turn. An unowned conversation therefore has no user memory at all.

## The rule

> **Normative.** This is the rule.
>
> 1. When a session drives a workflow, the user identity passed into the execution context is the session's own owner, and only when that owner is a real user.
>
> 2. A session with no owner, or owned by no real user, passes no user identity, and must not fall back to the identity of the caller driving the turn; doing so would hand one caller's memory bucket to the next.
>
> 3. The identity passed this way is what the `user` memory scope resolves.

## Related rules

- Names: MEM-6
- Referenced by: MEM-6, MEM-9

---

Rule identifiers are permanent and are never renumbered. This specification carries
no implementation status: each implementation publishes its own standing against
these rules. Licensed CC BY 4.0.