Memory Vault v0.26.0-alpha.3

What changed

• Fixes the cancellation-priority bug reported against v0.26.0-alpha.1: current records now form an explicit deterministic tier before superseded and resolved history, followed by score descending and memory ID ascending.
• Applies the same ordering to Python and independent TypeScript recall, Vault handoff, the six-operation Agent facade, result context and frozen pagination.
• Preserves every historical record, ID, signature, source, text and status. Historical goals remain queryable after current decisions.
• Bounds state-witness traversal before the retrieval byte budget, including large and multi-hop supersession cases.
• Prevents anonymous relay status GETs from filling the control table and accepts equivalent concurrent issuer refreshes without accepting changed membership or node state.
• Adds memory-vault-network-test-v0.26.0-alpha.3.zip: an isolated, no-Docker, all-synthetic endpoint trial. It creates local temporary keys, uses one-time enrollment, sends selected synthetic memory through E2EE, verifies relay storage and recipient persistence separately, recalls the encrypted reply locally, then removes its temporary state.

Operated trial

The release pins a time-bounded operated preview service. A tester needs only the network-test ZIP, Python 3.10–3.14, outbound HTTPS, and a separately supplied one-time code:

python3 run.py --service https://commands-harvard-kingdom-tube.trycloudflare.com --run-code ONE-TIME-CODE

The endpoint does not read an installed Vault, plugin, hook, project, clipboard or user content. Private endpoint keys never leave that endpoint. The relay can see routing, timing, size and network-address metadata but cannot decrypt message bodies.

This preview uses one Cloudflare Quick Tunnel relay operated from a maintainer endpoint. It has no uptime SLA, redundancy or independent failure-domain guarantee. It does not prove traffic anonymity, model understanding, real-model adoption, unlimited capacity or thousand-agent scale.

Exact release evidence

• Release source: d657d8381326693673426e66373d47e80f73be40
• Squash-merged main commit: 3592b96fdf5cd039875525b9e5a43b4756fb8786; its tree matches the tagged source.
• Required GitHub checks passed on Ubuntu/Python 3.10, macOS/Python 3.12 and Windows/Python 3.12.
• Targeted Python relay/HTTP/race/trial/coordinator campaign: 20 passed.
• Python/TypeScript retrieval and native Agent campaign: 15 passed, with one pre-existing documented expected numerical-boundary failure.
• Actual extracted client package passed synthetic local save/recall, exact retry, hook capture and byte-preserving backup/restore verification.
• Actual extracted network-test ZIP completed a public HTTPS round trip: connect, discover, remember, relay stored, recipient validated_saved, encrypted reply, local recall and cleanup.
• Four ZIPs contain 592 declared members. Source and final artifacts were checked against the actual private trial codes, private key material, personal absolute paths and username; zero matches were found.

Verify every download with SHA256SUMS. This is a prerelease and is not auto-activated by the stable updater.

Memory Vault v0.26.0-alpha.2 — Current network repairs

Memory Vault 0.26.0-alpha.2

A usable, explicitly installed preview of the model-neutral communication and memory client. This release packages the current network repairs and replaces stale installation pointers. It does not replace your memory or automatically join a network.

Changes

• Authenticated replacement-node repair from retained sender queues.
• Opt-in deterministic retrieval v2; validated relay storage proofs.
• Signed topic policy, grants and subscriptions with durable authority state. Encrypted topic fan-out is still pending.
• Fix first-use private sync-root permissions so an interrupted fragmented transfer can resume.
• Preserve canonical memory records, opt-in visible-turn capture and the eleven existing MCP memory tools.

Downloads

Choose memory-vault-client-v0.26.0-alpha.2.zip for the full client, or the independent protocol ZIP if you only need the specification and synthetic examples. The review ZIP contains public source and reproducible tests. Verify SHA256SUMS before extraction. Back up existing private memory and configuration before installing; follow the client README for local marketplace installation and optional network dependencies.

The optional native network encrypts at endpoints using X25519/JWE with signed control and delivery proofs. An operator must provision identities and trust. There is no default public relay or cloud upload. Local SQLite memory is not encrypted by this feature.

Verification

Source commit: af1423f89e56d89fac9b5032216ec53b5e846d02.
All seven release assets and all 529 ZIP members passed exact-byte inventory and bounded privacy review. No real memories, credentials, account configuration or machine paths are included. Checksums are not publisher signatures.

The actual extracted review ZIP passed 129 synthetic tests without failures, errors or skips. The actual client ZIP and local installed cache passed save/recall, retry, visible-hook capture and inert backup/restore checks. Strict TypeScript checking passed for all 15 files.

The selected core, network, v0.25 and release-source campaign completed on CPython 3.11.4 / Node 22.19.0: 641 passed, 10 skipped, one known expected failure, with no unexpected failures or errors (652 selected tests). Skips cover native Windows and separately opted-in large-file/rclone cases; the expected failure is the documented default-v1 cross-runtime ranking boundary. These are not passing cases. The required three-platform protocol CI passed on this exact source; it is a basic protocol check, not native client or network certification.

Limits

This is an alpha, not a production-security, real-model adoption, live-cloud, native-Windows or 1,000-agent certification. The default v1 ranking has one known cross-runtime floating-point boundary; deterministic v2 is opt-in. Preserve backups. Topic fan-out, sustained authorization/queue work and scale acceptance remain open.

中文：此版本更新了原生加密通信、节点恢复、检索和话题授权相关修复。安装前请保留旧记忆与配置备份；不会自动创建身份、联网或上传私有记忆。当前仍是预览版，尚不代表千代理组网、真实云同步或生产安全验收完成。

Memory Vault 0.26.0-alpha.1 — Private memory network preview

Memory Vault 0.26.0-alpha.1

This preview adds a private communication and persistent-memory network for independently running agents. It is an alpha, not a production or thousand-agent certification.

What is included

• Native connect, remember, recall, discover, send, and receive operations, with Python and independent TypeScript endpoints.
• Separate Ed25519 signing and X25519 encryption identities; authenticated end-to-end encrypted delivery, issuer-signed membership, key-bound invitations and explicit recovery.
• Independently hosted ciphertext relay nodes, offline queues, stable retries, signed receipts, bounded pumping and explicitly authorized node transfer.
• Existing canonical memory IDs, bytes, signatures, legacy memory tools and client capabilities are preserved. Recall identifies inherited evidence and prompts revalidation of outdated environmental assumptions.

Verification and limits

The final archives were inspected for private data, exact member inventories and committed source bytes. Fresh extracted archives passed 19 selected synthetic agent/network cases and the client launcher save/recall/hooks/recovery check. The last targeted source campaign had 88 passes and one explicitly expected failure; strict TypeScript compilation passed. These are distinct scoped checks, not a whole-suite pass.

The expected failure is a Python/JavaScript floating-point ranking boundary; exact cross-runtime ranking is not guaranteed. Three real models, live cloud-account upload/readback, public HTTPS deployment, automatic replica repair and thousand-agent operation remain unverified. The preview roster limit is 256. No public relay or automatic service startup is supplied.

Source: 1b0eae0fdf8b2c045f99b92858c72da61cf9e753.

Downloads

• Client ZIP: full source-built client/plugin and optional network modules.
• Protocol ZIP: specification, schemas and synthetic examples; no executable code.
• Review ZIP: source and synthetic review cases.
• release-manifest.json and SHA256SUMS: exact artifact hashes. Checksums are not publisher signatures.

Start here · Private network setup · Detailed scope and open gates

Apache-2.0; dependency notices are retained. Installing or extracting this release does not grant execution permissions or activate network services.

Privacy maintenance — 2026-08-31

Historical source identities and archive metadata were refreshed for privacy. The 0.25 archives replace machine-local report references with generic references; runtime source bytes are unchanged. The 0.26 archives retain every source byte and update only generated source provenance. These privacy-edited archives are not byte-identical copies of the original downloads; use the current release-manifest.json and SHA256SUMS. Historical commit signatures do not carry over to rewritten commits. Do not merge pre-maintenance repository history into current branches.