Give your AI memory without giving it everything.
This is the design the whole record is shaped around, and it is the part that is not built. The column exists in the schema and 0 rows populate it. Read this as a decision, not a feature.
The usual approach is to load it and ask nicely.
Most systems place what they know into the model's context and instruct it not to repeat the sensitive parts. That is a request, and it fails quietly: nothing raises an error when a model mentions something it was asked to withhold, and you find out from the customer.
The inversion is the design here. If it may not be spoken, it is not in the window. Information an agent is not allowed to disclose is never placed in its context in the first place, so disclosure is prevented by absence rather than by instruction. Speakable summaries are the field that will carry the version of an event an agent is permitted to say out loud, beside the fuller one only the operator can read.
Two summaries, one event
The full note, and the sayable one. The agent is handed the second and never sees the first, so there is nothing to leak.
Absence is enforceable
A boundary made of missing data can be tested. You can plant a fact and assert it appears in zero prompts. A boundary made of wording cannot be tested at all.
It fails closed
An event with no sayable version is simply not offered to an agent. Silence is the failure mode, which is the correct one.
0 of 548 ledger rows carry a speakable summary. The column is in the schema and the write path accepts it; nothing populates it. Until something does, every customer-facing summary would be the unfiltered one, and the line quoted above describes an intention rather than a running behaviour. It is the most quoted sentence about this product and it is the one with the least code behind it, so it is marked accordingly at the top of this page.
measured 2026-09-02 | state SPEC | 0 of 548 rows | reproduce with ledgerctl.py shipstate
The boundary that is enforced today is the audience stamp.
Every fact is stamped at write time with the business that captured it and the audience allowed to see it, and that is live rather than designed. It is a coarser instrument than a per-sentence summary, and it is real. Read how scoping works.