Trust
Privacy starts with family boundaries
Agent Noi is designed so one family can never discover, retrieve, infer, or act on another family’s information.
Release 0 principles
Family information is scoped to one family tenant. Authorization is checked before retrieval and again before any write or future action.
Browser code receives no database service credentials. Sensitive family content is excluded from general analytics and diagnostics.
Durable memory will remain visible, correctable, and forgettable. Conversation deletion and memory deletion will be separate, explicit controls.