# Knowledge and access

Memory keys, standing instructions, audiences, and sensitivity levels.

## What gets recorded

An agent stores a memory when you ask it to remember a statement. Mana keeps the exact statement as evidence, the memory, and its origin in one transaction. A repeated request stores nothing twice. A changed statement under the same key becomes a new revision; the earlier revision stays readable in the history.

## Memory keys

A memory key is a stable address. Agents read a key directly, without a search. Use these families:

| Key | Purpose | Example |
|---|---|---|
| `learning/<slug>` | One distilled learning: what was measured or decided, and why | `learning/rls-tenant-guc` |
| `learning/glossary` | One term for one concept, the whole organization | one memory |
| `config/<area>/<name>` | One group or company setting | `config/style/prose-rules` |
| `highlight/<project>` | What the store holds on a project and how to query it | `highlight/mana` |

## Standing instructions

When a client connects, Mana hands it the active `highlight/*`, `learning/glossary`, and `config/*` memories that you are allowed to read. The agent sees your organization's conventions before its first tool call. The text is bounded; when a key is omitted for size, the instructions name it. Any agent can ask for the same text again during a session.

## Audiences

Every memory has an audience. The default is private: only its author reads it. Ask the agent to share with the whole organization, or with one part of it, at the moment you record the memory.

| Audience | Who reads it |
|---|---|
| private | you |
| tenant | every member of the organization |
| `org:<path>` | the people under one node of the organization tree, such as `org:research/lng` |

An audience never widens on its own. Only the author, or a person with a wider grant, changes it.

## Sensitivity levels

Each memory also has a level: `public`, `internal`, `confidential`, or `restricted`. A member's agent reads up to `internal`. An admin's agent reads up to `confidential`. `restricted` is for people; no agent grant reaches it. A deterministic label is set at write time from the audience and the level. An agent does not decide the level.

A wrong level or audience is corrected with the same key and a reason. Mana keeps the prior revision and records who changed what.
