Skip to content

mnemo 1.1.0 — security hardening

Choose a tag to compare

@DanceNitra DanceNitra released this 13 Jul 15:56

Security hardening from the first internal security pass (SECURITY.md). Both additions OPT-IN; default = 1.0.0 behaviour (5 tests verify).

  • Mnemo(max_text=N): remember() truncates oversized text + stamps meta.truncated_from (availability guard).
  • verify_writes(warn_unpinned=True): surfaces the self-referential-pubkey footgun; governance_report().proof.signature_authenticity states the trust level.
  • SECURITY.md: honest threat model (no RCE/ReDoS surface, constant-time HMAC; two documented residuals).

pip install 'agora-mnemo[mcp]'