v2.23.0

What's Changed

• test(acceptance): add canonical served-memory provenance fixture by @tcconnally in #810
• docs(strategy): add artifact and evidence-digest roadmap by @tcconnally in #813
• docs(bench): record v2.22 release validation evidence by @tcconnally in #814
• feat(artifacts): add deterministic evidence-preserving log digests by @tcconnally in #815
• feat: persist resource-bound action evidence by @tcconnally in #816
• feat: validate Vault evidence envelopes by @tcconnally in #817
• feat: extend Vault evidence to capture writers by @tcconnally in #818
• feat(security): encryption key propagation and SQLite contention fixes by @mateuszruszkowski in #819
• test: enforce Vault integration conformance contract in CI by @tcconnally in #824
• feat: add provenance-preserving context-selection benchmark by @tcconnally in #825
• feat: add indirect memory-poisoning admission gates by @tcconnally in #826
• feat: expose hash-only runtime stage trace validation by @tcconnally in #827
• docs: by @tcconnally in #831
• docs: by @tcconnally in #832
• docs: evidence-chain and continuous-attestation guidance (perseus-vault#830) by @tcconnally in #833
• docs: clarify degraded fallback behavior by @tcconnally in #834
• docs: canonize 'byte integrity != logical content' in digest semantics by @tcconnally in #843
• eval: FUSE filesystem projection of the Vault memory store (decision record) by @tcconnally in #844
• design: MCP resource surface for the context engine (write-boundary slices, index-as-fan-in, URI template) by @tcconnally in #845
• feat: AAR null-effect-on-deny and argv-level policy evaluation for tool actions by @tcconnally in #846
• feat: scoped rejected-value tombstones (#849), encryption-by-default (#850), machine-verified registry (#848) by @tcconnally in #851
• feat: signed, distributable policy/authority profiles (sigstore-style attestation) by @tcconnally in #847
• docs: add context engineering and AI memory research memo by @tcconnally in #861
• fix: scope journal readers by workspace by @tcconnally in #877
• feat: add deterministic memory quality evaluation gate by @tcconnally in #878
• feat(#863,#880,#864,#873,#887,#865): Phase 0 — admission contract, epistemic trust axis, recall outcome, authority split by @tcconnally in #890
• feat: add comprehensive Vault benchmark package by @tcconnally in #891
• feat(#854,#855): workspace-scoped consolidate/dream + correction attribution by @tcconnally in #892
• fix(#854,#855): review follow-up — archive predicates, scoped dedup, schema alignment by @tcconnally in #893
• feat(recall): bounded dense/hybrid completeness with adaptive over-fetch (#856) by @tcconnally in #895
• fix: deterministic recall replay for the quality gate (replay-frozen-recall) by @tcconnally in #894
• feat(claim-card): evidence-backed claim cards projection (#852) by @tcconnally in #896
• feat(live-update): staleness gate + fd-preserving handoff restart (#858) by @tcconnally in #897
• fix(#898): batched suppression filter, backend-aware quality scenario, 8-core scale gate by @tcconnally in #899
• fix(#898): scale gate on the real runner (ubuntu-latest) + budgets calibrated to 2-vCPU by @tcconnally in #900
• feat(#866,#868): retention lifecycle — expiry, redaction, physical erasure + data-boundary contract by @tcconnally in #901
• feat(#876): governed distillation — learned_memory capability, receipt-gated registration, source-hash binding, revocation/staleness lifecycle by @tcconnally in #902
• feat(#879): Hermes profile <-> workspace binding — registry, lifecycle controls, tool-boundary enforcement by @tcconnally in #904
• chore: purge legacy product names (mimir/mneme/plutus) for the major release by @tcconnally in #903
• feat(#883,#867): fused multi-strategy recall + traceability by @tcconnally in #905
• feat(#872): retrieval telemetry & trust-concentration reporting by @tcconnally in #906
• feat(#889): keystone-suggestion instruction extraction with anchored patterns by @tcconnally in #907
• feat(integrations): add Hermes native MemoryProvider plugin integration by @sowerkoku in #908
• Chore/vault legacy name purge by @tcconnally in #909
• feat(vault): deployment profiles for offline/local/provider runtime posture (#870) by @tcconnally in #910
• fix: overhaul Hermes integration (follow-up to #908) by @tcconnally in #911
• feat(graph): gate graph retrieval by utility + enforce edge evidence/scope/lifecycle (#869) by @tcconnally in #912
• feat(recall): validity-aware recall profile (#860) by @tcconnally in #913
• feat(projection): task-scoped projection surfaces (#859) by @tcconnally in #914
• feat(#884): evidence-grounded observations with explicit freshness anchoring by @tcconnally in #915
• feat(#885): optional quantized embedding storage (int8/bit, Hamming scoring) by @tcconnally in #920
• feat(#886): mental-models tier — curated summaries consulted first by @tcconnally in #921
• feat(capture): source-chunk expansion (#888) by @tcconnally in #922
• feat(#875): learned anticipation — self-tuning preload trigger telemetry by @tcconnally in #927
• feat(#924): guide service — seeded operating guide, pointer-not-inline by @tcconnally in #928
• feat(#919): prospective query hints — write-time vocabulary-gap indexing, default-off by @tcconnally in #933
• feat(#923): declared exact-match retrieval arm by @tcconnally in #935

New Contributors

• @mateuszruszkowski made their first contribution in #819
• @sowerkoku made their first contribution in #908

Full Changelog: v2.22.0...v2.23.0