Hindsight v0.1.0

Hindsight v0.1.0

Hindsight is a governed-memory incident-response cockpit for tracing unsafe remembered advice, correcting it without erasing history, and proving a bounded recorded-recommendation change under controlled replay.

Release: https://github.com/OCHOLA-EDDYPHIL/hindsight/releases/tag/v0.1.0

Source revision: ed9a027643cf043ec8e984e6a8b09784db457ab7

Highlights

• CockroachDB tenant-scoped vector recall and serializable provenance bind memory reads to runs, Gemini decisions, human verdicts, governed corrections, lineage, and the transactional outbox.
• The controlled payments replay records scale_workers before correction and throttle_retries after correction while holding incident input and normalized observations constant and permitting only governed memory as the intervention.
• Generated procedural lessons remain audit-visible and unavailable to strict retrieval until exact evidence-bound review. Rejection preserves the candidate, reason, and operation identity without creating an active successor.
• Retained-history invalidation and trusted-version reassertion preserve application-valid and transaction-time history.
• Durable dispatch covers leases, reclaim, idempotency, terminal quarantine, exact redrive, cleanup, and fenced realtime delivery.
• AWS Lambda, API Gateway, SQS, EventBridge, DynamoDB, CloudWatch, Cognito, SSM, S3, and CloudFront host the accepted demo plane.

Product evidence

Exact-main CI run 31949350803, full live acceptance run 31949390747, aggregate provenance artifact 9264441112, and deployed verification run 31950313100 bind the accepted deployment and public health surfaces to the source revision above.

Observability evidence is deliberately reused from run 31927724566: OpenTelemetry is exported through AWS ADOT to X-Ray with bounded sampling, correlating API, dispatch, worker, memory-read, reflection, and memory-write spans. Realtime is separately traced and correlated by run and tenant.

Alert delivery is separate evidence from final acceptance artifact 9264362519. It confirms operational and budget subscriptions plus challenge-bound ALARM → OK delivery to the encrypted controlled SQS receiver. The receiver is an inspection boundary, not proof of human or on-call response.

CockroachDB evidence boundary

Distributed Vector Indexing is on the runtime retrieval path and supplies separate vector-plan qualification. An earlier development-side Cloud Managed MCP client used only get-table-schema and select-query through read-only OAuth inspection operations to reconstruct persisted identities without selecting memory content. Restricted-role privilege evidence comes separately from a deterministic audit informed by pinned CockroachDB Skill SQL; neither that privilege result nor the DVI plan is attributed to Managed MCP.

Publication integrity

An anonymous clone resolved the exact source revision, Apache-2.0 license, and homepage. Gitleaks 8.30.1 inspected the redacted 458-commit all-ref history and exact final tree. The only matches were the intentional synthetic redaction-test key pattern and SSM parameter-path/empty-token example; zero unresolved credential findings remained.

Architecture: https://github.com/OCHOLA-EDDYPHIL/hindsight/releases/download/v0.1.0/hindsight-architecture.png

Architecture SHA-256: 5695a110881df53521f2575154ca8daf89fadb7fd36ede8a455790df49b884ed

Boundaries

The controlled loop records recommendations; it does not execute infrastructure changes or prove service recovery. The project does not claim universal poisoned-memory detection, generalized learning efficacy, production-scale capacity, regional failover, or completed hosted tenant deletion/recovery.

The v0.0.1 release and retained video are historical. The video was not refreshed for this release, and Devpost has not been submitted.