v3.14.0 — Write-Approval Gate, Forget Canonical, Safe Doctor

v3.14.0 — Write-Approval Gate, Forget Canonical, Safe Doctor, Sync Hardening

9 features, 17 fixes, 3 security improvements since 3.13.0.

Added

• Write-approval gate (#456): memory.write_approval: true in Hermes config stages all memory writes to pending/memory/ for review. New mnemosyne_apply_pending tool replays approved records.
• mnemosyne_forget_canonical (#435): Complete CRUD for canonical facts. Retire slots without deleting.
• Safe doctor + selected repair workflow: mnemosyne doctor --safe for read-only diagnostics, --repair for fixing orphaned references, WAL gaps, etc.
• Query/document embedding prompt prefixes (#401): Customize BGE embedding prompts via MNEMOSYNE_EMBEDDING_QUERY_PREFIX / MNEMOSYNE_EMBEDDING_DOCUMENT_PREFIX.
• Shared-surface sync hardening (#442): Sync payloads sanitized, cross-model security findings closed.
• CLA enforcement: All PRs require signed CLA. license/cla check enforced on main.

Fixed

• Config set crash (#481), expired Discord links (#479), onnxruntime thread spam in LXC (#453)
• Polyphonic recall collapse (#389), content mutation (#387), content hydration (#471)
• CI contracts restored (#480), unsafe connection lifecycle reverted (#477/#382)
• Embedding API retries (#475/#478), Hermes provider diagnostics, local LLM SSE errors (#447)
• Legacy FK migration (#452), hyphenated recall expansion, code audit cleanup (#460)

Hermes Integration → 0.5.0

Write-approval gate, forget_canonical tool, doctor bank routing, provider hardening.

Full changelog: https://github.com/mnemosyne-oss/mnemosyne/blob/main/CHANGELOG.md

What's Changed

• fix: align DEFAULTS sync_roles and skip_contexts with provider hardcoded defaults by @AxDSan in #454
• docs: add CLA and update CONTRIBUTING.md with CLA requirement by @AxDSan in #455
• ci: install sync extra for sync tests by @dplush in #458
• Fix Hermes provider defaults after config bridge by @Mi55ed in #445
• fix: expand hyphenated recall query tokens by @dplush in #443
• fix(beam): migrate legacy memory_embeddings FK on database init by @ruangraung in #452
• fix(local_llm): set stream to false to prevent SSE errors by @Senophyx in #447
• fix(hermes): make doctor respect resolved bank by @TurgutKural in #448
• Add query/document embedding prompt prefix env vars by @daefron-cmd in #401
• feat: add safe doctor and selected repair workflow by @dplush in #461
• revert: unsafe #382 connection lifecycle change by @dplush in #477
• fix(polyphonic): hydrate content before diversity ranking by @dplush in #471
• fix: restore main CI contracts after merge by @dplush in #480
• chore: bump to 3.14.0 and update CHANGELOG by @AxDSan in #485
• chore(hermes): bump mnemosyne-hermes to 0.5.0 by @AxDSan in #486

New Contributors

• @Mi55ed made their first contribution in #445
• @Senophyx made their first contribution in #447
• @daefron-cmd made their first contribution in #401

Full Changelog: v3.12.2...v3.14.0