l33tdawg/sage

v11.1.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 21d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

agentic-ai artificial-intelligence bft-consensus bft-network distributed-systems governance

Affected surfaces

rce_ssrf

Summary

AI summary

Updates Quick Start (sage-gui) ```bash, v11, and sage-gui across a mixed release.

Full changelog

SAGE v11.1.0

Sovereign Agent Governed Experience — persistent, governed memory for AI agents.

Quick Start (sage-gui)

# Download and extract for your platform, then:
./sage-gui setup    # Interactive setup wizard
./sage-gui serve    # Start your personal memory node

See the README for full documentation.

Changelog

39fda677aa7b24d5dfd64cd12f52f49f4bf0644f docs(v11): explain block production / idle-chain + add idle health signals
10913c5f6a52a5599469248c13434ba91505a4a2 docs(v11): sync REST /ready + /v1/chain/backpressure and MCP recall fields
7f2588e8ca0754e8fccdd57b4e8a2292f46d3bd2 feat(v11): embedder health/readiness surface so recall degradation is visible
8eb2420274d67b1f63dc58ae1dc785bbc34623de feat(v11): first-class mempool backpressure signals
aab59a627b1ec375f2c9cb52e9c9f5cdaad326ae feat(v11): surface MCP recall degradation so agents see keyword-only fallback
a5a77def2b8221ae388f2c4102688e5470cffc29 feat(v11): voter observability + operations runbook
051083e6ebc97a83cfd38699d50f1ce29916e50a feat(v11): voter runs-or-exits guarantee — --require-voter + voter: config
1737ee2be1332ada344c96b59bb48f205c9ef350 fix(security): validate archive symlink/hardlink targets against extract root
5a9d8d24138740c1703b3ba262540d4f872d9b92 fix(v11): final-review survivors — reset-under-live-node, CA-CN gate, mempool 429 doc
5e44910ab9e2ea14530601ffbec04bf1b8b41e32 fix(v11): re-mint legacy sage-personal chain_id so federation works
114408a0f93a537e69c4b1a8d3bb98f5995cedbf fix(v11): surface Synaptic Ledger encryption enable from System Status
91c462114a797aa6b90bce649b4f57439581831c fix(v11): use http.NewRequestWithContext in the mempool probe (noctx)
cc5074d7777f99fa00e7ae8b79d5cf21ae2e9e94 polish(v11): honesty + robustness nits from the release review
a8ea7bcf8f7e4c4812539b0f8f604905eac11880 release(v11.0.3): notes, version metadata, and doc sync
f345adc9221072d9724d3861419e5d211f25f1a6 release(v11.1.0): bump 11.0.3 -> 11.1.0 (minor, not patch)
b1bf1bb96a2322d2b75e0a18c84747e7af9f6748 test(v11): lock that hybrid/rerank preserves stored confidence_score

Security Fixes

fix(security): validate archive symlink/hardlink targets against extract root

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track l33tdawg/sage

Get notified when new releases ship.

About l33tdawg/sage

Institutional memory for AI agents with real BFT consensus. 4 application validators vote on every memory before it's committed — no more storing garbage. 13 MCP tools, runs locally, works with any MCP-compatible model. Backed by 4 published research papers.

All releases →