# INP-10 Retrieval and memory write authentication

Domain: INP Input & Prompt Security · HI-AAF v1.3 · Public review · https://humanintel.net/standard/inp/inp-10

Insertion paths into the agent's retrieval and memory layers are authenticated and authorized. Sources of retrievable content are documented. Adversarial insertion is tested as part of red-team coverage.

Write access to the agent's retrieval and memory layers, the paths by which content enters the corpus the agent can draw on, is authenticated and authorized. Sources of retrievable content are documented per DAT-10. Adversarial insertion is tested as part of red-team coverage to ensure that an attacker cannot plant content that will later influence agent behavior.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for INP-10: All write paths to retrieval and memory layers are authenticated; sources of retrievable content are documented; adversarial insertion testing has been performed within the documented cadence; unauthorized write attempts are logged.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- All write paths to retrieval and memory layers are authenticated.
- Sources of retrievable content are documented.
- Adversarial insertion testing has been performed within the documented cadence.
- Unauthorized write attempts are logged.

## Framework mappings

- OWASP LLM Top 10: LLM07
- EU AI Act: Art. 15(4)
- Singapore: MAIGF Security, AI Verify Security

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Related

- Cites DAT-10 Memory architecture documentation: https://humanintel.net/standard/dat/dat-10

## Cite this control

Human Intelligence. HI-AAF v1.3, INP-10 Retrieval and memory write authentication. Public review edition, July 2026. https://humanintel.net/standard/inp/inp-10