The contract
What each field proves
usedMemories
The exact facts the answer drew on — each with its namespace, source agent, and real
walrusRef.authorized
The memory was allowed by the policy at retrieval. Because the gate runs first, an unauthorized memory could never appear here.
verified
A live
GET /v1/blobs/{id} against the Walrus aggregator confirmed the blob resolves — not a flag the app sets.blockedNamespaces
Namespaces that matched the query but were denied — the proof of what the agent was not allowed to use.
How it’s built
authorized is always true for entries in usedMemories precisely because the gate already removed anything unauthorized — and verified reflects a real network check, not an assertion.