Client Matrix

Local governance contract for how different clients may connect to the same formal Memory. This page uses read-only preview data and does not connect to production Memory, VPS, tokens, or a live MCP server.

Capability boundary

Graph export

read-only

Evidence resolver

metadata-only

Candidate write

review queue

Stable write

blocked / approval

Raw body

blocked

Client	Runtime	Transport	Auth mode	Read scope	Candidate write	Stable write	Evidence resolver	Risk	Status	Next action
ChatGPT	ChatGPT web / connector runtime	mcp_remote	oauth_user	metadata-only evidence resolver	candidate_only	approval_required	metadata_only	medium	recommended	Use OAuth-scoped MCP reads and candidate proposals; keep stable writes behind explicit review.
Codex	Local Windows / repository task runtime	local_mcp_bridge	local_process	read-only graph export	candidate_only	approval_required	metadata_only	medium	mock_defined	Consume local exports and emit review candidates only; never place production credentials in repo files.
Local Agent	WorkBuddy / CLI providers / local MCP host	local_mcp_bridge	local_process	summary index only	candidate_only	approval_required	metadata_only	high	future_review	Define per-agent allowlists, request ids, and audit ledger before any live bridge is enabled.
Mobile / Operit	Android phone / mobile assistant surface	mobile_proxy	session_allowlist	summary index only	candidate_only	blocked	metadata_only	high	blocked	Keep mobile to summaries and candidate drafts until device auth, lock screen risk, and revocation are reviewed.
Roundtable	AI Roundtable rooms / multi-agent discussion	roundtable_bridge	approval_gate	candidate queue only	candidate_only	blocked	metadata_only	high	blocked	Route only summarized room outcomes into candidate review; do not let rooms ingest private raw memory.
Future MCP Client	Unselected future desktop or hosted client	not_selected	none_yet	no direct read	blocked	blocked	metadata_only	critical	future_review	Require client identity, threat model, scopes, audit path, and revocation before granting any access.