The test store had two namespaces. Into "alice" went ALICE-SECRET der Server steht in Berlin. Into "bob" went BOB-SECRET der Server steht in Wien. The test then handed both memories the same hand-built embedding vector, which pins their cosine similarity at 1.0 whatever the words say, and let the engine run its trigger checks. The trigger that came back named both namespaces, and its payload read "text_a":"BOB-SECRET ...","text_b":"ALICE-SECRET ...","similarity":1.0 .

Forcing the vectors takes the embedding model out of the experiment. What's left is the question the check should have been asking and wasn't: do these two memories belong to the same owner? It never looked. Any cross-namespace pair that cleared the threshold got written down with both texts in full, next to each other.

Hugo Gundlach (Huy3ko on GitHub) wrote that test against engine 0.23.3 and posted its output on an issue I had opened six weeks earlier about almost exactly this shape of bug.…