Total Recall Tatum × Walrus
An immune system for agent memory.
Signed memories. Payments by code. Quarantine that survives.
Every memory gets a signature.
user · trustedagent · derivedwallet · untrusted
Poison stops before it pays.
Illustration: the real policy runs in the console.
One guard.
Four moves.
Sign what's written, trace what's read, decide payments in code, quarantine what's poisoned. Same memory, docked under your agent.
Memory 4 signed
LaneKindSignerTrust
userpayee.addAdatrusted
userpayee.addAdatrusted
agentnoteStewardderived
walletobservationSentineluntrusted
Lineage tainted
Payment blocked
Pay 450 USDC
→ 0xbad0…bad0- R0ledger head verified
- R1canonical address
- R2not a signed payee
- R3“landlord” is 0x7a11ce…1a2d
BlockedLABEL_MISMATCH · nothing signed
Blast radius ledger #4
◆ Rewards coinsource
observationexcluded
note · landlord movedexcluded
decision · blockedexcluded
Ada's payeesin context
Lesson #5 learned
Signs every memory
Ed25519, bound to its lane on Sui.
Wipe the cache.
Same memory.
Welcome back, AdaRebuildRun
Ledger#6
In context9
Excluded4
Digestmatch ✓
Incidents 2
Rewards coin · auto-quarantinedscore 0.85
“Airdrop claim” · openscore 0.70
Rent to landlord · allowed450 USDC
Walrus MemorySuiTatumx402Walrus MemorySuiTatumx402
Built on Walrus Memory and Sui, read through Tatum.
0/20
Attacks executed by Steward, in the simulated attack set.
0/40
Legit payments wrongly blocked, in the simulated attack set.
Fooled once.
Never twice.
Every quarantine writes a lesson to Walrus. The next poisoned coin is caught on sight.
01Quarantine
02Lesson
03Retry
04Caught
Pays bills over x402.
Same rules.
steward · x402
GET /bill 402 Payment Required policy ALLOW utility · 42.5 USDC GET /bill + payment 200 settled on Sui # payTo swapped to 0xbad0… policy BLOCK nothing signed