Memory Controls
The AI remembers — and shows you the ledger, with edit and delete.
Named by Shape of AI under Governors. Personalization without a visible ledger reads as surveillance; the same personalization with one reads as service. The control surface — view, edit, delete, and a no-memory mode — is what converts creepy into considerate.
Why it works. Memory’s value compounds, but so does its risk; user-visible controls cap the risk while keeping the compounding.
Steal: show what was remembered at the moment it’s remembered, not only in a settings vault. Skip: memory that silently shapes answers with no inspection path — the first “how did it know that?” moment costs you the account.