Published now
Privacy controls are designed, destructive writes stay locked
Correction already follows an audited request path. Export and full deletion remain unavailable until their server APIs can prove complete and recoverable handling.
Memory choice
What it remembers should never become invisible to you.
Stellar X keeps conversation, observation, long-term memory, derived summaries, and operational logs in explicit privacy and retention boundaries.
Deletion is a cascade, not a hidden toggle
Stellar X will not label a memory deleted until the primary record and every derived representation are removed or quarantined with an auditable failure state.
Disclosure protocol
Protected by design
Deletion is a cascade, not a hidden toggle
Stellar X will not label a memory deleted until the primary record and every derived representation are removed or quarantined with an auditable failure state.
Connected only when ready
Provider keys and passwords never enter browser-readable data
Administrators cannot silently edit owner memory
Export, correction, deletion, and high-risk access leave audit evidence
Stellar X distinguishes a prepared surface from a connected product capability. It does not present an unconnected state as live data.
Private by default
Conversation and owner memory are scoped to the authenticated person. Model providers receive only the minimum task context.
Visible and correctable
The owner can review what the Persona believes, distinguish certainty, and submit evidence-backed correction without rewriting history.
Deletion must be complete
A valid removal clears the source record, vector index, cache, derived summaries, and every future recall path.