The SI memory tools, the charter switch and strict reads — memory_record, memory_search and memory_forget (pack memory, AI_ONLY) over kbservice's /api/notes/memory; ToolDescriptor.charterSwitch, the program's one opt-in rule (R1-5): a tool naming a switch is offered to an SI only when its charter sets that LIMIT key to 1 or more, or its org is in ENFORCE and the switch lets ENFORCE offer it, else hidden as CHARTER_SWITCH_OFF; the memory tools' switch is maxMemoryCards with ENFORCE offering nothi...