The knowledge graph runs in Neo4j with space-scoped Cypher so queries never bleed across tenants. Note, entity, and graph services keep captures addressable as linked objects instead of isolated files.

A Cypher query guard blocks prompt-injection patterns that could leak cross-space data. pgvector embeddings and hybrid buckets complement graph traversals for similarity and keyword recall.

Memory-service search and MCP assemble bundle vector hits with graph neighbors into one context package agents and the web UI can trust.