v0.2.0

Upgrade notes

• MNEMO_FORWARDED_HOPS now defaults to 0 (was 1). If mnemo runs behind a reverse proxy that writes X-Forwarded-For, set MNEMO_FORWARDED_HOPS=1. Otherwise every SSO login appears to come from the proxy and shares one per-client limit of 10 attempts a minute. The old default let any client spoof that header when no proxy was in front (#4).
• New request limits (#4):
  • The recall query is cut to 2,000 characters.
  • remember refuses what/why/how over 4,000 characters, or more than 32 names per role.
  • keep refuses more than 200 records per call.
• TLS: rustls, rustls-webpki and webpki-roots were updated for RUSTSEC-2026-0381/0382 (#4).

Highlights

• Faster semantic recall. At one million memories, p50 goes from 149 ms to 37 ms (#6).
• Searches go first. Query embeddings no longer wait behind backfill or distillation (#7).
• Distillation fix. Threads of people whose subject contains | (for example auth0|123) are distilled again (#5).

mnemo version still prints 0.1.0, because the crate version was not bumped. The build commit (941e44c) and the signed release manifest identify this release.

What's Changed

• Improve onboarding, documentation and SPDX coverage by @mariojcr in #2
• fix: address CodeQL cryptographic-value alerts in layout and tests by @mariojcr in #3
• fix(security): bound per-request work, harden the login limit and logout by @mariojcr in #4
• fix(distill): threads of subjects containing '|' were never distilled by @mariojcr in #5
• perf(recall): scan vectors in contiguous slabs, scoped, with top-k and AVX2 by @mariojcr in #6
• perf(embed): searches go ahead of background embeddings by @mariojcr in #7

Full Changelog: v0.1.1...v0.2.0

v0.1.1

What's Changed

• feat(auth): a service key acting for someone can report their finished turns by @mariojcr in #1

New Contributors

• @mariojcr made their first contribution in #1

Full Changelog: v0.1.0...v0.1.1

v0.1.0

Full Changelog: https://github.com/mariojcr/mnemo/commits/v0.1.0