AI Passport Consent Audit — Egoist Machines
Granting granular permissions doesn't mean you understand the cumulative impact. The audit helps you see not just what's enabled, but what your combined permissions actually reveal about you across AI systems — and how that affects your autonomy and identity.
Overall Exposure Score
Low Exposure
Some data is shared, but your identity remains fragmented across apps.
Identity Reconstruction
Data Flow
Autonomy Erosion
You're in control — AI assists but doesn't decide
You're in control — AI assists but doesn't decide
Growing dependence — AI shapes your options more than you realize
Significant delegation — many decisions follow AI-suggested paths
Autonomy erosion — AI effectively makes decisions in your name
Feedback Loops
Your purchase history trains recommendation engines
They show you more of the same products and brands
Your future purchases look increasingly similar
The pattern reinforces itself — your choices narrow
Your social connections inform content algorithms
You see what your circle sees and validates
Your worldview narrows to shared perspectives
The data confirms the assumption about who you are
Your project data shapes AI assistance
It suggests paths similar to your past work
Your output converges toward an established pattern
The model learns this convergence as "your type"
Claims about you get stored as persistent facts
Future AI interactions reference these stored claims
You correct less than you accept by default
The AI's version of you becomes your self-image
The write side has the same gap
recall() is already gated per category. The tool that writes new memories isn't gated at all by default.
Any connected app calls this directly and it writes immediately — the tool's own description calls saving "expected and safe." Visibility defaults to shared, so every other connected app can read it back right away. Only items an app explicitly flags sensitivity: protected get a review gate — and that gate covers other apps reading it back later, not the write itself.
Queues the fact in the owner's private inbox; it isn't cross-app readable until the owner approves it. Nothing requires an app to use this over remember() — it's available, not the default path. Making it the default for every category except preference and fact, and flipping visibility to app_private unless the user grants sharing, closes the write-side gap with tooling Egoist has already shipped.
Compound effect: When remember() writes are combined with recall() reads across apps, the system doesn't just know you — it can shape what you become. Every memory written by one app becomes the training data that shapes another app's suggestions about you, creating a feedback loop between what the system stores and what it presents as "your preferences."
Consent Ledger
Every grant, timestamped and revocable — the receipt today's fragmented flow doesn't produce.