Provenance gate: no AI agent memory write without a source

A provenance gate stops AI agents from writing unsourced facts into memory, blocking false claims while allowing legitimate updates and logging all attempts.