Personal memory

Your global, cross-project memory syncs to a private, account-scoped store. It is never shared, never grantable, and reachable only by your own unscoped keys — the privacy boundary is structural, not a setting. The client keeps personal-scoped memory out of any workspace push.