How to meet it
OWASP AISVS v1.01
Memory, Embeddings & Vector Database Security · Memory Expiry & Revocation
Memory can be reset
Verify that memory can be reset.
OWASP AISVS v1.01, requirement 8.3.2
In plain English
Be able to wipe an agent's or user's memory when asked, or when you suspect it has been poisoned.
What good looks like
- Memory can be reset per user, per session and in full.
- Resets are logged.
- Users can ask for their memory to be cleared.
How teams usually do it
- An admin function that deletes the relevant stores and caches.
Evidence an auditor would accept
- The reset procedure and a test record.
Common mistakes
- Clearing the main store and missing caches or backups that refill it.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.