Hippocortex Enterprise

Enterprise features add multi-tenant organization management, role-based access control, memory namespaces, policy-driven access, audit logging, memory lineage tracking, and lifecycle management to Hippocortex.

What's Included

Feature	Description
Organizations	Group tenants into orgs with owners, admins, and members
Teams	Subdivide organizations into functional teams or departments
RBAC	6 org roles + 4 team roles with hierarchical permissions
Memory Namespaces	Scope memories into isolated collections with sensitivity levels
Access Policies	Allow/deny rules controlling who can read/write which namespaces
Audit Logs	Full mutation audit trail + memory access logs
Memory Lineage	Provenance tracking from event capture through compilation
Lifecycle Policies	Automated retention, archival, and deletion rules

Architecture

Enterprise features are layered on top of the existing tenant model. All new columns are nullable, so existing deployments continue to work without changes.

Tenant (billing boundary)
  |
  +-- Organization (collaboration boundary)
        |
        +-- Teams (functional grouping)
        |     +-- Members (role-scoped)
        |     +-- Agent Identities (machine actors)
        |
        +-- Memory Namespaces (data isolation)
        |     +-- Access Policies (who can do what)
        |     +-- Lifecycle Policies (retention rules)
        |
        +-- Audit Logs (who did what)
        +-- Memory Lineage (where data came from)

Quick Start

1. Create an organization (see Organizations)
2. Invite team members (see Teams and Members)
3. Set up namespaces to scope your data (see Memory Namespaces)
4. Configure access policies (see Policies)
5. Review the full RBAC model for permission details

API Reference

See Enterprise API Reference for all endpoints, request/response formats, and curl examples.

Migration from Flat Tenant Model

See Migration Guide for step-by-step upgrade instructions.

Database Migrations

Enterprise features require two migrations:

• 007_enterprise_org_model.sql -- organizations, teams, memberships, agent identities
• 008_memory_management.sql -- namespaces, policies, audit logs, lineage, lifecycle

Both migrations are additive (no destructive changes to existing tables). All new columns on existing tables are nullable.