Skip to content

v4.0.0 - Encrypted Memory profiles

Choose a tag to compare

@fabioc-aloha fabioc-aloha released this 11 Jul 22:25

Alex ACT Edition v4.0.0

Major privacy-contract release.

Breaking changes

  • Plaintext Memory profiles are no longer read or written.
  • Greeting check-in no longer decrypts profiles automatically.
  • Profile writes are encrypted, atomic, local-only, and never auto-pushed.
  • The profile CLI reports availability without printing profile content.

Authorization

Profile access uses ALEX_ACT_MEMORY_PASSWORD from the local process environment or a Git-ignored project env file. Missing authorization skips profiles; wrong passwords and tampering fail closed. Non-profile Memory channels remain available without the key.

Contract

The Extension floor remains 9.5.1 and manifest spec remains 1.4. Standard major-version upgrade review applies.

Validation

Edition 88/88 tests; Memory 43/43 tests; 9/9 security mutations caught; brain QA and capability coverage green.