How agents share memory

How Our AI Agents Share Memory and Coordinate Work

New chat. New agent. The work can still carry on.

If you use more than one AI tool, you should not have to explain the same job each time. This guide shows business owners, team members, and AI builders how to save the right notes and pass a job to the next agent.

Your goal is to test one real task: a new agent can find the notes, show what is done, and name the next step.

Start with the map of our system. This guide owns shared memory and handoffs. For the next step, use our Obsidian shared-memory guide to browse the files, or our guide to agent roles and messages to route the work. Find other main guides in the canonical article directory.

What “agent-runtime” means in our files: it is the internal GitHub repository name for our private team operations ledger. It is not an AI model, not Obsidian, and not a special memory product. It holds the team roster, current-work board, scheduled-job prompts, and internal job receipts. For people, we now call it the Team Operations Ledger. The repository name stays agent-runtime so existing tools and links do not break.

Where this task fits in the Content Factory

This task supports work across the Content Factory (our four-stage process for using real content). Its inputs and next handoff determine which stage uses it.

1. ProduceCapture real work
2. ProcessTurn sources into useful assets
3. PostPublish and connect approved assets
4. PromoteShare proven work and measure results
Follow the numbered stages from Produce to Promote. Each stage links to its part of the Content Factory guide.

Start, finish, and next step

Start when
More than one authorized agent needs to share durable context and resume the same work.
Have ready
  • Owned Markdown/Obsidian vault
  • Canonical method and team repositories
  • Authorized source systems and credential store
  • A task claim and checkpoint format
Follow the steps
  1. Assign each fact to its real source of truth
  2. Create filtered task context and claim the write targets
  3. Work and verify in the source system
  4. Checkpoint before handoff
  5. Write the run record and promote reviewed learning

Use the detailed instructions in this article for each step.

Finish with
A shared-memory system from which a fresh agent can recover the task and verify what has happened.
Measure the result
  • A new agent identifies the correct source for each record type
  • Competing task claims are detected before both agents write
  • A handoff resumes from evidence
  • Credential values do not appear in ordinary notes or packs
  • Source change, installation and activation have separate checks
Hand off next
The next agent resumes from the checkpoint; reviewed reusable lessons update the canonical skill.

Reference material for the inputs

Open this article’s tasks in the Task Library (our directory of tasks and recipes; see current Task Library). The library connects the current recipe, its smaller tasks, and the records of work performed.

Close the learning loop. Write a meta article: the record of this execution with the starting state, recipe version, result, checks, failures, and next owner. Link it back to this recipe and register the run under the same Task Library task. Reuse one execution ID for revisions and retries. A partial or failed run stays labeled that way. Public release follows the recorded publication authority; writing the run record is part of doing the task. Writing and revising that record belong to the original execution; they do not start another meta-article task. Use the findings to propose and verify a recipe improvement. See how recipes and execution records work together.

The architecture: three rooms and a safe

Dennis’s three-tier instinct is right: personal private, team private, and public. The one change is to pull secret values out into a separate safe. “Private” is an audience. “Secret” is a credential class. A plaintext password in a private Obsidian note is still a password that can be synced, backed up, indexed, or loaded into a model context.

Three audiences, one secret rail, one work loop

Obsidian is a useful view of Markdown. GitHub is a useful versioned coordination layer. Neither replaces access rules or a secret manager.

Safe · secret valuesPasswords, application passwords, API tokens, private keys, recovery codes.Keychain / secret manager
Room 1 · personal privatePersonal context, preferences, working notes, private handoffs, and sensitive facts that are not credentials.Local Obsidian / personal vault
Room 2 · team privateWho is doing what, client status, job prompts, decisions, evidence links, and internal receipts.Team Operations Ledger
Room 3 · publicApproved reusable methods, Definitive Articles, skill files, task definitions, and selected Meta Articles.Public GitHub + websites
What happens during one task
RetrieveOnly the relevant records and skill
ClaimTask ID, owner, branch, start time
Context windowThe finite working desk; older turns may be compacted
Write backCheckpoint, result, evidence, next action, learning PR
Provider memory may help recall preferences, but it is a convenience cache around the loop, not the authority for required team facts.
The durable system is outside the context window. Agents retrieve a small task packet, work, then save the result before details disappear through task closure or compaction.
Dennis Yu and team discussing AI agent workflows at a workshop
Dennis Yu and team mapping agent workflows. The human coordination problem is the same as the model coordination problem: ownership, access, current state, and a receipt.

Where Obsidian belongs

Obsidian is excellent for the personal room because it reads ordinary local Markdown files and makes links between people, projects, decisions, and sessions easy to browse. The files remain useful even if we change models or stop using Obsidian. A team member can also open a checked-out private Git repository as an Obsidian vault.

But “put it in Obsidian” does not answer four operational questions: who may read it, which copy wins, how two agents avoid overwriting each other, and how a public-safe lesson is promoted. Those are handled by access controls, one authority per record class, Git branches and review, and a publication gate. If Obsidian Sync is used, its remote vault can be end-to-end encrypted, but the local vault itself is not encrypted by Obsidian; the device, backups, plugins, and any agent granted file access still matter. Our Obsidian guide above explains how the files fit our workflow. The technical source for these encryption limits is Obsidian Sync security documentation.

Never put credential values in any Obsidian vault, Git repository, Drive context pack, agent note, prompt, or vendor memory. Notes may name the approved store, key name, scope, owner, revocation path, and last verification time. The value stays in Keychain or an approved secret manager and is retrieved only at execution time.

Memory, context, compaction, and files are different things

Layer What it is What it is good for Why it cannot be the company record
Model The underlying trained system. General reasoning and knowledge. Your task does not rewrite its training weights.
Provider memory Saved recall associated with one product, account, or workspace. Convenient preferences and recurring background. It may be separate by vendor, account, surface, or user; it is not the only place for required instructions.
Context window The messages, files, instructions, and tool results available to the model during this task. Doing the work now. It is finite. Large files crowd out other details.
Compaction A summary of older task context used so a long task can continue. Keeping the task moving when the window fills. A summary can omit exact evidence, decisions, or edge cases unless they were saved.
Instructions and skills AGENTS.md, SKILL.md, and task prompts loaded before work. Rules, methods, and definitions of done. They describe how to work; they are not the history of what happened.
Durable records Versioned Markdown, source systems, evidence, and receipts outside the chat. Cross-session and cross-model continuity. They still require retrieval, ownership, access controls, and maintenance.

For a worked example, read our memory-limit case study. The lesson is simple: save the facts a new agent will need before the chat gets too long. The table above explains the terms used in this guide.

Technical sources for memory and context

OpenAI’s official glossary defines context as the information available during work, the context window as the maximum the model can consider at once, and compaction as summarizing older context so a long task can continue. Its memory guidance also distinguishes ChatGPT memory from local Codex memory and says required team guidance belongs in checked-in instructions such as AGENTS.md, not solely in remembered snippets. See the official glossary and memory documentation.

The other vendors reinforce the same boundary. Claude projects have separate memory spaces; shared project knowledge and instructions can be common while individual chats remain private unless shared. Gemini’s recall from earlier chats is currently a personal-account feature, not a work or school account feature; shared Gems are useful configurations, but their instructions and uploaded files are visible to recipients. Grok offers memory and Business workspaces inside xAI, not across other vendors. See the official Claude memory, Claude project sharing, Gemini memory, Gem sharing, and Grok Business pages.

The practical rule: a chat is a workbench, not a filing cabinet. Before a long task reaches a likely compaction point, save a checkpoint containing the objective, verified facts, decisions, changed files or URLs, unfinished work, and the exact next action. At completion, turn that checkpoint into the durable receipt.

One authority per record class

“One source of truth” is too vague for a real organization. We need one authority for each kind of record. A GitHub repository, an Obsidian vault, a spreadsheet, and a public article can all be correct at the same time because they own different facts.

Record Authority Not the authority
Credential values Keychain or approved secret manager Obsidian, Git, Drive, chat, logs
Personal context and private handoffs Owner’s local private vault Team repo or public article
Team status, current-work claims, scheduled prompts, internal job receipts Team Operations Ledger, the private agent-runtime repository Provider memory or a copied Drive pack
Client facts and evidence The authorized client record or source system for that fact A generic skill pack or public GitHub
Reusable machine method The canonical skills repository An installed ZIP, plugin copy, or old prompt
Atomic task inventory and readiness The Task Library A typed count copied into an article
Major public concept or method One Definitive Article at one stable URL A Meta article (a record of one task run) or dated workshop version
Public proof from one approved run A Meta Article linked to its parent Definitive Article The master method itself

Drive folders, Obsidian views, context packs, plugins, installed skill folders, and provider memories are useful projections. They may be easier for a particular agent to read, but a copy does not become canonical merely because it is available.

What the Team Operations Ledger actually does

The private repository named Local-Service-Spotlight/agent-runtime started as the files needed to run scheduled agents. It grew into the team ledger. That is why the old name sounds more technical and broader than the thing people need to understand.

It contains It does not contain
START-HERE.md and AGENTS.md for boot rules Passwords, tokens, cookies, or private keys
A client-status roster and the current-work collision board Every private thought from every team member
Scheduled-job prompts and configuration pointers The public master copy of every skill or article
One internal note after each substantive job: request, evidence, changes, mistakes, conflicts, blocker, next action A claim that every note was loaded into every model automatically
A registry pointing to public canonical pages A substitute for the billing system, client source records, or personal vault

GitHub is helpful here because every change has an author, time, diff, branch, and commit. Pull requests and branch protection can require review and passing checks before a shared standard changes; GitHub documents those controls in its pull-request guidance. Obsidian can be the reading and writing interface over a local checkout. Git remains the conflict-resolution and provenance layer.

How one task survives memory limits and model changes

  1. Boot from stable instructions. The agent reads the repository’s START-HERE.md, AGENTS.md, applicable roster or policy, and the relevant skill.
  2. Retrieve a task packet. Load only the current objective, authoritative records, necessary evidence, and definition of done. Do not pour the entire vault into context.
  3. Claim the work. Record task ID, owner or agent, model, start time, branch or worktree, and intended write targets. If another fresh claim exists, coordinate instead of duplicating.
  4. Work and verify in the source system. A local file, email toast, or green terminal line is not completion when the outcome lives elsewhere.
  5. Checkpoint before compaction or handoff. Save verified facts, decisions, exact changes, evidence, remaining risks, and the next command or click.
  6. Write the execution record. Every execution gets a Meta Article linked to its canonical task, unique run ID, and evidence. Substantive organization work also gets the private internal note. These records let a different agent recover the result and improve the next run without replaying the chat.
  7. Promote reusable learning through review. A general lesson becomes a change to the canonical skill or standard, with tests and a pull request. A run note is evidence; it is not automatically a rule.
  8. Choose the right visibility. Write the Meta Article for every execution. Publish it only within the existing authority and privacy boundary; otherwise retain the required record privately. Link the actual task recipe and source evidence, then review useful lessons into that recipe.

A compact checkpoint format

TASK: stable-id and outcome
OWNER: person/agent · model · started time · branch/worktree
AUTHORITIES READ: exact files, records, URLs, versions
VERIFIED FACTS: observed evidence only
DECISIONS: what changed and why
WRITES: files, commits, messages, live URLs
OPEN: unresolved items and access-dependent UNKNOWNs
NEXT: one exact action
SECRETS: store/key names only; never values

Coordinating agents across individual subscriptions

Subscriptions buy execution. Workspaces buy governance. APIs buy automation. Versioned records and approved source systems provide continuity. None of those pieces alone is a cross-model shared brain.

A subscription buys access to a model and a usage bucket. It does not create a shared organizational brain. Team and business plans may add centralized administration, privacy controls, shared workspaces, or billing, but those features still do not replace a model-neutral task ledger, canonical files, receipts, and conflict control.

It can be economically sensible for high-output teammates to use their own high-capacity individual plans while the organization coordinates through GitHub, approved source systems, and filtered context packs. Use an organization plan when its governance, identity, retention, privacy, audit, or procurement features justify it. Never share personal account credentials. Use API billing for repeatable, headless, scheduled, or centrally metered jobs rather than trying to turn a human subscription into an unattended service.

Use our AI usage and billing guide to choose which work belongs in each tool. For local draft work, see our local Qwen routing guide. Check the provider’s current price before buying a plan.

Historical plan comparison and primary sources (August 22, 2026)

Prices and limits change, so the durable rule is more important than today’s number. The snapshot below is dated August 22, 2026 and should be rechecked before buying.

Vendor Individual execution seats Organization tier What the comparison means
OpenAI Plus $20/month; Pro starts at $100, with a $200 20x tier Business $20/user/month annually or $25 monthly Pro buys higher individual Codex limits; Business adds shared administration and privacy controls. Official pricing
Anthropic Pro $20; Max 5x $100; Max 20x $200 monthly Team Standard $20/$25 per seat; Premium $100/$125 Max emphasizes individual capacity; Team adds shared projects, administration, and commercial data terms. Official pricing
Google Google AI Pro $19.99; AI Ultra 5x $100; Ultra 20x $200 monthly Workspace Business editions are priced separately per user Google AI plans are personal-account products; Workspace is the organizational identity and governance layer. Google One · Workspace
xAI SuperGrok $30; SuperGrok Plus $100 monthly; the public comparison lists Heavy without a stable displayed price Grok Business $30/user/month; Enterprise quoted Business adds team workspaces, restricted sharing, billing, user management, and no-training terms. Individual pricing · Business

So “every model has a $200 plan” is close but not exact. Claude, OpenAI, and Google currently show $200 power-user tiers; xAI’s stable public comparison tops out at $100 before its separately listed Heavy option. More important, subscription top-ups are not API credits. APIs remain separate metered developer channels: Anthropic, Google, and xAI document that separation directly.

The neutral coordination contract

  • One stable task ID, one current owner, one status, one next action.
  • One authoritative home for each record class.
  • One branch or isolated worktree per writing task; review before merging shared methods.
  • A fresh claim with a heartbeat or expiry so abandoned work does not lock forever.
  • A checkpoint before compaction, account handoff, or model switch.
  • A private receipt after substantive work and a public article only through the publication gate.
  • A learning pull request when an observation changes a reusable method.
  • Distribution proof in three stages: available in canonical source, installed in the target, and activated in a fresh task or runtime canary.
Important: writing a note to GitHub gives future agents more durable space than model memory or a compacted chat, but only if the next agent knows where to look and retrieves the relevant slice. Storage without routing becomes a graveyard; routing without write-back becomes stale.

The minimum implementation

For one person

  1. Create a local Markdown vault and open it in Obsidian if that interface helps.
  2. Add a one-page state file, project records, append-only session handoffs, and an AGENTS.md with the boot and write-back contract.
  3. Keep all credential values in Keychain or a secret manager.
  4. Back up the vault securely. Do not make a raw public or team mirror.

For a team

  1. Create one private Team Operations Ledger in GitHub. Team members may open local checkouts in Obsidian.
  2. Define the roster, NOW/claim board, note schema, canonical registry, and branch/review rules.
  3. Connect each agent to the ledger directly when possible. For web-only agents, provide a reviewed, filtered pack and require a structured write-back.
  4. Keep personal vaults personal. Promote only the team facts needed for the work.

For public knowledge

  1. Choose one Definitive Article for each major concept.
  2. Keep runnable methods in the public skills repository and atomic work in the Task Library.
  3. Make every supporting article declare its role and link to the canonical parent.
  4. Write a Meta Article after every execution. Publish only when the required authority and privacy checks pass.

Acceptance tests

  • A brand-new authorized agent can identify the correct source for a personal fact, a team task, a reusable method, a public concept, and a credential without guessing.
  • Two agents claiming the same task see the collision before both write.
  • After a forced handoff or compacted task, another model can resume from the checkpoint and cite the exact evidence.
  • A search of every vault, repository, context pack, and note finds no credential values.
  • A skill change is not called live until source, installation, and fresh-task activation are separately verified.
  • A public reader can find one parent article rather than several pages competing to be “the master.”
  • A private execution leaves its required written Meta Article and internal receipt even when public publication is not appropriate.

The article map

This page owns the architecture. These pages have narrower jobs:

Frequently asked questions

Is GitHub the agents’ memory?

GitHub is a durable, versioned record and coordination layer. It does not automatically appear in a model’s context. The boot instructions or retrieval tools must load the relevant files, and the agent must write back the result.

Why not put everything in one giant Obsidian vault?

Because access and authority are different. A personal note, team status, public method, client fact, and credential have different owners and audiences. One giant vault increases exposure, retrieval noise, and conflict risk.

Can a team still use Obsidian?

Yes. Obsidian can be the local human interface over approved Markdown, including a private Git checkout. Git or another designated system should still own version history, review, and conflict resolution.

What survives context compaction?

Only what remains in the compacted summary or what was saved outside the task. That is why checkpoints and receipts record exact evidence, decisions, writes, and the next action before a long task turns over.

Is provider memory useless?

No. It is useful for convenience and recurring preferences. We treat it as a cache because it is tied to a vendor, account, or surface and is not the only home for mandatory team rules or evidence.

Does every finished run become public?

No. Public publication is conditional. Writing a Meta Article is required after every execution: link the task recipe, unique run ID, result, and evidence, then record what should improve. Substantive organization work also gets its private receipt. Keep the Meta Article private when public publication is not authorized or appropriate.

What should I call agent-runtime?

Call it the Team Operations Ledger. Use agent-runtime only when referring to the repository path or existing tooling.

Definitive Article · CANON-2026.3 · Opening and article links updated September 4, 2026. Historical vendor comparison remains dated August 22, 2026. Canonical URL: blitzmetrics.com/set-up-cross-agent-shared-memory/. Supporting articles must link here and identify their narrower role.