reference

Substrate memory vs. Anthropic managed memory

A comparison between substrate memory and the persistent memory Anthropic ships for Claude on Managed Agents: files mounted into a session’s container, scoped to one agent and isolated by design.

Anthropic shipped persistent memory for Claude on Managed Agents into public beta on April 23, 2026, solving a real problem: one agent forgetting what it already tried across its own sessions. The mechanism is filesystem files mounted into a session’s container, scoped to that session and isolated from other agents by design. This entry describes what shipped, the structural reason a model lab’s memory feature stops there, and where substrate memory sits relative to it.

§01 · what anthropic shipped

What Anthropic shipped, honestly.

Persistent memory for Claude on Managed Agents reached public beta on April 23, 2026.

PropertyDescription
storageMemories are stored as files, not as a typed graph.
mountWhen a memory store attaches to a session, it mounts as a directory at /mnt/memory/ inside that session's container.
accessThe agent reads and writes the mount with the same bash and file tools it already uses for the rest of its filesystem. Memories are also exportable and manageable through the API.
product layerMemory sits on the Agent SDK, alongside a consultative curation pass (Dreaming) and multi-agent orchestration, as part of the Managed Agents product line rather than a core-model capability.

Reported results from real deployments are substantial: Netflix carries context across sessions, Rakuten’s long-running task agents report 97% fewer first-pass errors from using memory to avoid repeating past mistakes, and Wisedocs built a document-verification pipeline on cross-session memory. These are legitimate outcomes for one agent’s own continuity, not a shallow feature. Primary source: Anthropic’s Managed Agents memory announcement.

§02 · structural boundary

What it doesn't do, structurally.

The isolation is a design property, not an oversight.

Managed Agents sessions are isolated by design: each session’s memory store is its own, and nothing shares between agents natively. Pooling experience across multiple agents requires adding a separate vector database outside the shipped memory mechanism. The feature also runs inside Anthropic’s own hosted environment; it does not extend to agents built on other model vendors or other runtimes. Read together, the shape is memory scoped to one agent’s own container, which is what isolation by design means.

§03 · structural argument

Why a model lab can't ship the inversion.

A model lab’s product is the model. Shipping a persistent, cross-session, cross-agent, cross-vendor substrate would mean building and operating infrastructure whose center of gravity sits outside the model itself, a different kind of product with a different set of guarantees. That is not a matter of engineering effort so much as a constraint on what a model lab is organized to build.

The same logic separates a workflow runtime’s intermediate state from a chat’s context window: keeping a session’s memory scoped to that session and that container is what keeps the product legible as the model plus its own history, rather than a second, separately governed product line.

§04 · expansion pack, not competitor

Read it as an expansion pack.

Substrate memory does not change how Managed Agents memory behaves; a session reading and writing its own /mnt/memory/files continues to do exactly that, unmodified. It does not replace the mechanism Anthropic ships; the two operate at different layers. And it is not a parallel duplicate of it either: it adds a layer that a session-scoped, single-agent memory store does not attempt to cover, a graph that persists across sessions and across the agents and clients that write to it, kept outside any one vendor’s runtime.

Dynamic Workflows illustrate the same shape at a shorter timescale. A workflow’s subagents can use well over a million tokens of intermediate reasoning that never enters the orchestrator’s context, and only the converged synthesis returns to the chat. The workflow runtime does not remember having converged once the run ends; persisting that result across sessions requires a store outside the runtime that produced it. Substrate memory names that layer, and treats each new session-scoped primitive a model lab ships as another source that can write to the graph, not a competing store to reconcile against it.

§05 · three timescales, one shape

Three timescales, one shape.

The constraint behind Managed Agents memory's isolation is the same constraint at three different scales.

TimescaleWhere the constraint appears
per-turn (in-session)A context window is finite. Prompt caching keeps a stable prefix cheap to re-read within a session, but the cache expires on a fixed TTL, typically five to sixty minutes, and nothing survives past it uncached.
per-workflow (sub-session)An orchestrator's context cannot hold the reasoning of hundreds of parallel subagents without collapsing under noise, so a workflow's intermediate results are discarded once the run converges; only the final synthesis returns to the chat.
per-project (cross-session)Each new session starts without access to what a previous one decided. Nothing in a single agent's own runtime carries that state from one session into the next.

Managed Agents memory addresses part of the third row: one agent’s own continuity, inside one vendor’s hosted runtime. A graph that persists across sessions, across agents, and across vendors addresses the same shape at every row, a write target that sits outside whichever runtime produced the reasoning in the first place.

§06 · using both

Using both, not either-or.

The two are not mutually exclusive. Managed Agents memory suits an agent’s continuity across its own sessions inside a hosted Claude environment: a shipped, working answer to whether an agent already tried something. Substrate memory suits reasoning that needs to persist across sessions, across the several agents and clients that touch a shared piece of work, and across whichever model produces a given turn. A team can run both: one agent keeping its own /mnt/memory/ continuity inside Managed Agents, while every agent involved also reads and writes a shared graph that outlives any single session or vendor.

§08 · common questions

Common questions.

Does Vinculum run inside Claude Managed Agents?

No. Vinculum is an MCP server; it exposes a substrate to any MCP-compatible client. It is not part of, and is not endorsed by, Anthropic’s Managed Agents product. The comparison here describes two independent designs, not an integration.

Is Managed Agents memory a typed graph?

No. It is stored as files mounted into a session’s container and read with the same file tools the agent uses elsewhere. A typed graph records entries and the relationships between them; a file mount records whatever the agent chose to write to a path.

Does a substrate replace Managed Agents memory?

Not for the problem it solves. Managed Agents memory is a working answer to one agent forgetting its own past sessions inside a hosted Claude environment. A substrate addresses a different scope: reasoning shared across sessions, across agents, and across whichever model produced a given turn. The two can run together.

see also

Related entries.

this entryvs. Anthropic managed memory
standard
the vinculum standard
The normative specification a conforming implementation is measured against.
read the standard →