IgorGanapolsky/mcp-memory-gateway

v1.26.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 3d MCP Developer Tools

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

agent-reliability ai-agents ai-cost-optimization ai-safety amp claude-code

+14 more

codex cursor developer-tools feedback-loop gemini guardrails mcp mcp-server opencode pre-action-checks reduce-llm-cost save-llm-tokens thompson-sampling thumbgate

Summary

AI summary

Updates Release Links, changeset/v1-25-2-upgrade.md ThumbGate v1.26.0 Release, and changeset/v1-25-1-upgrade.md ThumbGate v1.26.0 Upgrade across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	High	Hardens Slopsquat Guard for supply‑chain protection. Hardens Slopsquat Guard for supply‑chain protection. Source: llm_adapter@2026-05-31 Confidence: high	—
Feature
Feature	Medium	Adds Adaptive Temperature Gating in Thompson Sampling. Adds Adaptive Temperature Gating in Thompson Sampling. Source: llm_adapter@2026-05-31 Confidence: high	—
Feature	Medium	Adds Proactive Ground Truth Verification in Hallucination Detector. Adds Proactive Ground Truth Verification in Hallucination Detector. Source: llm_adapter@2026-05-31 Confidence: high	—
Feature	Medium	Adds Entropy-Aware Context Assembly mechanism. Adds Entropy-Aware Context Assembly mechanism. Source: llm_adapter@2026-05-31 Confidence: high	—
Feature	Medium	Adds Top-P Nucleus Gating to eliminate knowledge slop. Adds Top-P Nucleus Gating to eliminate knowledge slop. Source: llm_adapter@2026-05-31 Confidence: high	—
Feature	Medium	Adds Knowledge Entropy Scoring for logit‑inspired conflict detection. Adds Knowledge Entropy Scoring for logit‑inspired conflict detection. Source: llm_adapter@2026-05-31 Confidence: high	—
Feature	Medium	Adds Stateful Sequence Governance using Ralph Loop hardware‑wired control. Adds Stateful Sequence Governance using Ralph Loop hardware‑wired control. Source: llm_adapter@2026-05-31 Confidence: high	—
Feature	Medium	Adds Plan Quality Gate for `plan_intent` with structured missing‑context checks before agent execution. Adds Plan Quality Gate for `plan_intent` with structured missing‑context checks before agent execution. Source: llm_adapter@2026-05-31 Confidence: high	—
Feature	Medium	Ships `scripts/install-shim.js`, `scripts/plan-gate.js`, and `scripts/trajectory-scorer.js` for hook wiring and runtime dependencies. Ships `scripts/install-shim.js`, `scripts/plan-gate.js`, and `scripts/trajectory-scorer.js` for hook wiring and runtime dependencies. Source: llm_adapter@2026-05-31 Confidence: high	—
Feature	Low	All production artifacts (Grok, Codex) built and ready for deployment. All production artifacts (Grok, Codex) built and ready for deployment. Source: llm_adapter@2026-05-31 Confidence: high	—

Full changelog

[email protected]

Release Links

npm: https://www.npmjs.com/package/thumbgate/v/1.26.0
GitHub Release: https://github.com/IgorGanapolsky/ThumbGate/releases/tag/v1.26.0
Compare: https://github.com/IgorGanapolsky/ThumbGate/compare/v1.25.2...v1.26.0
Publish workflow: https://github.com/IgorGanapolsky/ThumbGate/actions/runs/26720279768
npm published at: 2026-05-31T18:04:11.220Z
npm shasum: cdd8fcfd7cb41237d344894a07703a21f0957233
npm tarball: https://registry.npmjs.org/thumbgate/-/thumbgate-1.26.0.tgz
Release ref: 1cccbb63af8a1bc992384340585e5cb9b7ad7bbf

npm Email Companion

npm controls the native "Successfully published" email template, so the email itself stays short. Treat this generated artifact as the full release-note companion for that email: it carries the Changeset summaries, CHANGELOG entry, publish workflow, npm tarball, and shasum when available.

Full Changeset Release Notes

Patch Changes

.changeset/v1-25-1-upgrade.md

ThumbGate v1.26.0 Upgrade:

Adaptive Temperature Gating in Thompson Sampling.
Proactive Ground Truth Verification in Hallucination Detector.
Entropy-Aware Context Assembly.

.changeset/v1-25-2-upgrade.md

ThumbGate v1.26.0 Release:

Top-P Nucleus Gating (eliminate knowledge slop)
Knowledge Entropy Scoring (logit-inspired conflict detection)
Stateful Sequence Governance (Ralph Loop hardware-wired)
Hardened Slopsquat Guard (supply-chain protection)
Plan Quality Gate for plan_intent (structured missing-context checks before agent execution)
All production artifacts (Grok, Codex) built and ready.

.changeset/v1-25-3-hook-shim.md

Ship scripts/install-shim.js, scripts/plan-gate.js, and scripts/trajectory-scorer.js in the npm package so published installs can load hook wiring and packaged gate runtime dependencies.

CHANGELOG.md Entry

No CHANGELOG.md section was found for 1.26.0; the release notes above were generated from the changed Changeset files.

Verification Standard

Publish only runs from main after version sync, tests, and runtime proof pass.
The npm package is smoke-tested after publish by installing thumbgate@VERSION in a clean runtime.
GitHub Release notes are generated from Changesets, not only GitHub auto-generated PR titles.

Security Fixes

Hardened Slopsquat Guard – supply‑chain protection

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track IgorGanapolsky/mcp-memory-gateway

Get notified when new releases ship.

About IgorGanapolsky/mcp-memory-gateway

Pre-action gates that prevent AI coding agents from repeating known mistakes. Captures explicit feedback, auto-promotes failures into prevention rules, and enforces them via hooks.

All releases →