Privilege is a switch on the memory, not a sentence in the prompt

Outside counsel's engagement letter has a line about AI: nothing from this matter may be retained by any model or tool. The matter agent already runs in its own container; the memory question is the only part the walls don't answer.

Before the associate opens the first session, a script PUTs /api/v1/agent/memory/enabled with enabled false. The response carries updated_at. That timestamp goes into the matter file. Capture is off for every project on that agent, immediately, and it stays off across restarts because the flag persists.

When the matter closes and the container is deleted, there is nothing to purge, because nothing was written. The clause in the letter is one PUT and one timestamp.

Privilege is a switch on the memory, not a sentence in the prompt.