4.9.0 - every tool declares itself, and a written privacy policy

Every tool now says what it does before it runs, and the privacy policy is written down.

Tool annotations

All 14 MCP tools now carry a human-readable title and the standard MCP behavior hints: readOnlyHint on the seven tools that only read (search, relations, get, namespaces, recent, status, selftest) and an explicit destructiveHint on everything that writes, true for the two that remove things (memory_forget, memory_unlink), false for the rest. Clients that understand the hints can now group read from write tools, ask before destructive calls, and show "Search memory" instead of memory_search in their UIs. Agent hosts that gate tool approval on these hints, including Claude's connector surfaces, get exactly the metadata they expect. Nothing about the tools' behavior changed; they just declare themselves properly now.

The privacy policy, in writing

The policy Compartment always had by construction is now a page: https://maxfreedompollard.github.io/Compartment/privacy, with a summary section in the README. It is short because there is little to disclose: no data collection, no telemetry, no account, no network at runtime, and the only commands that touch the network are the ones you run yourself. Written down so that stores, directories, and anyone else who asks has a URL to point at.

Downloads

Artifact	For
Compartment-4.9.0.pkg	macOS, one click, with the optional menu bar utility
Compartment-4.9.0.dmg	macOS, drag to Applications
compartment-4.9.0-py3-none-any.whl	pip / offline installs, any OS
compartment-4.9.0.tar.gz	source distribution, packagers, air-gapped builds

Or, for the CLI and MCP server without the app:

pip install compartment