This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
Summary
AI summaryUpdates Highlights, Other, and defense-in-depth across a mixed release.
Full changelog
Agents Remember 2.9.2
Running the benchmark suite no longer reaches into your live workspace or worktree providers. Benchmarks now build their own isolated index from their pinned fixture, so a benchmark run can't trigger a re-index storm across your real provider stacks.
Highlights
- Hermetic benchmark provider setup.
prepare_configured_providersno longer wires a seed source — a benchmark indexes its own fixture cold instead of seeding from (and starting) the live workspace provider backends. - Seed guard (defense-in-depth). The GrepAI and CodeGraphContext seed resolvers now refuse a
benchmark-scoped target, so a benchmark can never clone/seed from another stack even if a source is mis-wired. - Benchmarked agent uses its own MCP server.
benchmark_mcp_config_overridespoints the benchmarked Codex at the benchmark's own MCP configuration rather than inheriting the host workspace's.
Why it matters
Previously, starting the benchmark suite seeded its providers from the live workspace coordination root. Because every worktree shares the workspace's GrepAI workspace identity, that disturbance cascaded a full re-embed across main and every worktree at once — saturating CPU and making the machine unusable. Benchmarks are now isolated like a regular worktree.
Other
providers/status.pycompacts the CodeGraphContext watcherlastRefreshsummary.- Regression tests for the seed guard and hermetic prepare.
Changes: https://github.com/Foxfire1st/agents-remember/pull/89
Security Fixes
- GrepAI and CodeGraphContext seed resolvers now refuse `benchmark`‑scoped targets (defense‑in‑depth).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Agents Remember
All releases →Related context
Related tools
Earlier breaking changes
- vmcp-v2.9.0 Removed tools direct_closeout_preview and direct_closeout_apply.
- vmcp-v2.0.0 `WorkflowKind` enum drops `heavy` and `heavy-task` values.
- vmcp-v2.0.0 `skills_install` no longer accepts a `layout` input; installer performs flat copy.
- vmcp-v2.0.0 Removed workflows W-01-heavy-task-workflow and W-03-chat-task-workflow.
Beta — feedback welcome: [email protected]