Skip to content

cdeust/Cortex

v4.13.3 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 14d MCP Data & Storage
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-memory-system anthropic causal-inference claude claude-code claude-code-plugin
+14 more
cognitive-architecture cognitive-science episodic-memory hopfield-network llm-memory long-term-memory mcp-server memory model-context-protocol neuroscience persistent-memory predictive-coding retrieval-augmented-generation vector-db

Summary

AI summary

Updates docker, invariants, and merge across a mixed release.

Changes in this release

Bugfix Medium

Fixes explicit DATABASE_URL anti-silent-fallback boundary and stale tool count in Docker.

Fixes explicit DATABASE_URL anti-silent-fallback boundary and stale tool count in Docker.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Bugfix Medium

Restores bare‑container DB‑less MCP contract (H4 root cause).

Restores bare‑container DB‑less MCP contract (H4 root cause).

Source: llm_adapter@2026-07-13

Confidence: high

 —
Bugfix Low

Resolves CodeQL incomplete‑url‑substring‑sanitization by using exact‑match URL assertions in tests.

Resolves CodeQL incomplete‑url‑substring‑sanitization by using exact‑match URL assertions in tests.

Source: llm_adapter@2026-07-13

Confidence: high

 —
Bugfix Low

Adds blocking bare‑container DB‑less smoke gate in CI.

Adds blocking bare‑container DB‑less smoke gate in CI.

Source: llm_adapter@2026-07-13

Confidence: low

 —
Full changelog
  • chore(release): 4.13.3 — restore third-party inspection contract + lock it with a CI gate
  • test(invariants): I2 allow-list — reheat writer shifted 177→182 by the lazy-psycopg guard block
  • merge: fix/bare-container-contract — third-party inspection contract restored + blocking docker-smoke gate
  • fix(docker): explicit-DATABASE_URL anti-silent-fallback boundary + stale tool count
  • ci(docker): add blocking bare-container DB-less smoke gate
  • fix(docker): restore the bare-container DB-less MCP contract (H4 root cause)
  • docs(privacy): describe storage truthfully per surface — SQLite default (.mcpb/Cowork), PostgreSQL for the Claude Code plugin
  • docs(readme): align tagline with the accountable-memory positioning
  • fix(tests): exact-match URL assertions — resolves CodeQL incomplete-url-substring-sanitization (#97, #98)

Full Changelog: https://github.com/cdeust/Cortex/compare/v4.13.2...v4.13.3

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track cdeust/Cortex

Get notified when new releases ship.

Sign up free

About cdeust/Cortex

Persistent memory for Claude Code grounded in computational neuroscience (41 cited papers)

All releases →

Related context

Beta — feedback welcome: [email protected]