The standard tenant / sub-tenant framing for multi-tenant is too thin. The cosmological metaphor, universe, galaxy, solar system, environment, gives you a layered model that maps onto the scopes that actually matter: compliance, billing, isolation, hierarchy.
Personas are the top-level containers. Projects are the next layer in. Here's why projects belong nested inside personas, not floating around as flat tags.
Years before AI agents, I was writing workflows that called other workflows, enforcing policy at the orchestration layer, and arguing about idempotency. vCAC turned out to be the apprenticeship for everything I'm doing now.
The closed-frontier club tightened. The big three US labs are sharing intelligence on Chinese distillation. Broadcom-Google-Anthropic locked TPU production through 2031 with 3.5 GW behind Claude. Meta walked away from open weights with Muse Spark. Mythos Preview held the safety line.
Some personas need to know my whole story. Others don't need to know my name. Backstory is a purposeful choice, not a default setting.
If the AI's persona and the user's UI drift apart, you're back to the leak. The symmetry rule says: when one shifts, the other shifts with it.
Three years into writing about personal AI. The framing has held in the parts that mattered, bent in the parts I expected to bend, and surprised me in places I didn't see coming. Worth restating the thesis cleanly and saying where it stands.
If your audit trail can't answer all five, what happened, why was it allowed, under what rules, who is accountable, who coordinated, you don't have an audit trail. You have logs. The five questions, what populating them takes, and the predictable failure mode for teams that miss each one.
Stop running your AI under a shared service account. Give the persona its own login, its own email, its own audit trail. Treat it like an employee, because that's what it is now.
Memory is the hard part of building a personal AI assistant. The model is mostly a solved problem at this point; what separates a daily-driver assistant from a glorified chat window is whether it remembers what matters and forgets what doesn't. Here's how I think about the architecture.
Q2 opens. Microsoft put an open-source agent governance toolkit on GitHub covering every OWASP agentic risk. Anthropic refused to ship Mythos 5 under ASL-4. Google split the bet with the Gemini Enterprise Agent Platform plus Gemma 4. Governance is finally shipping as code.
When most people say 'persona,' they mean a tone setting. I mean a room. Here's the difference, and why it's the whole game.
