This release adds 5 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summarySAGE v11.4.5 adds persistent agent memory, enhances Federation with opt‑in and address picker, expands Natter networking options, and advances Sync to a near‑complete end‑to‑end implementation.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Hardens domain sync against adversarial review (28 findings) Hardens domain sync against adversarial review (28 findings) Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Feature | Low |
Adds federation opt‑in toggle (default OFF) in control panel Adds federation opt‑in toggle (default OFF) in control panel Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds address picker for multi‑homed machines in join wizards Adds address picker for multi‑homed machines in join wizards Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds warm‑up countdown while a fresh node walks to app‑v15 Adds warm‑up countdown while a fresh node walks to app‑v15 Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds announce_addrs config to advertise explicit public multiaddrs in natter Adds announce_addrs config to advertise explicit public multiaddrs in natter Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds relay.enabled flag (coordinator‑only mode) and honest fallback docs in natter Adds relay.enabled flag (coordinator‑only mode) and honest fallback docs in natter Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Scaffolds libp2p connectivity service for relay/rendezvous in natter (v11.5 A1) Scaffolds libp2p connectivity service for relay/rendezvous in natter (v11.5 A1) Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Scaffolds separate Go module for libp2p connectivity service in natter (v11.5 A1) Scaffolds separate Go module for libp2p connectivity service in natter (v11.5 A1) Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Implements /fed/v1/sync/push receive‑side admission handler for domain sync Implements /fed/v1/sync/push receive‑side admission handler for domain sync Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds anti‑entropy digest and reconcile loop for domain sync Adds anti‑entropy digest and reconcile loop for domain sync Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Implements commit‑tail watcher for low‑latency delivery in domain sync Implements commit‑tail watcher for low‑latency delivery in domain sync Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Adds domain‑sync consent panel on the Federation page (frontend) Adds domain‑sync consent panel on the Federation page (frontend) Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Feature | Low |
Adds resend action for undelivered items in the sync status panel Adds resend action for undelivered items in the sync status panel Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Feature | Low |
Implements sender client and outbox drainer; end‑to‑end sync works (steps 4‑5) Implements sender client and outbox drainer; end‑to‑end sync works (steps 4‑5) Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Feature | Low |
Adds storage foundation for v11.5 domain sync (step 1/8) Adds storage foundation for v11.5 domain sync (step 1/8) Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Feature | Low |
Implements sync_domains consent CRUD and revoke purge (step 2/8) Implements sync_domains consent CRUD and revoke purge (step 2/8) Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Feature | Low |
Adds status surface and reference docs for domain sync (step 8/8) Adds status surface and reference docs for domain sync (step 8/8) Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Bugfix | Medium |
Enables inbound listener by default in federation with Settings toggle Enables inbound listener by default in federation with Settings toggle Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Bugfix | Medium |
Reads live app version from abci_info for readiness checks in federation Reads live app version from abci_info for readiness checks in federation Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Bugfix | Medium |
Restores TOTP seed cache at boot so federation survives restarts Restores TOTP seed cache at boot so federation survives restarts Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Bugfix | Medium |
Stops baking localhost into LAN join codes for federation Stops baking localhost into LAN join codes for federation Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Bugfix | Low |
Fixes Settings page crash caused by missing fedSettingGet/Set imports Fixes Settings page crash caused by missing fedSettingGet/Set imports Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
Full changelog
SAGE v11.4.5
Sovereign Agent Governed Experience — persistent, governed memory for AI agents.
Quick Start (sage-gui)
# Download and extract for your platform, then:
./sage-gui setup # Interactive setup wizard
./sage-gui serve # Start your personal memory node
See the README for full documentation.
Changelog
- d7d5f760e09348c01617f84a38c2986c6e8c46cf Improve task board clearing and pickup state
- 62acf190bea586d139e0e9819110628136bdfaf2 chore(v11.4.5): lint-clean the module + natter (shadow + errcheck)
- da79005eb4d7838b28e7645a0a4a4fa66ab0289f docs(roadmap): v11.4.0 status + close cross-scope transfer item as shipped
- 28f7ebac16b44e959b437590e722fc1ca7cabc61 feat(fed): federation opt-in (default OFF) + master switch in panel
- def52e0a1253da49a0e525e440e22563fcad8a14 feat(federation): address picker for multi-homed machines in join wizards
- 2de2d3e7986409fbb33b3a4ee19f7447216c44c1 feat(federation): warm-up countdown while a fresh node walks to app-v15
- 489ca40aa03248cd55b87fc221f7d173e629576b feat(natter): announce_addrs config to advertise explicit public multiaddrs
- 2684d8ecdb4852802009bdf39dc2ef3e8ef39326 feat(natter): relay.enabled flag (coordinator-only mode) + honest fallback docs
- 09de275bada326f3146d400dc428ca6749fed867 feat(natter): scaffold libp2p connectivity service (relay/rendezvous, v11.5 A1)
- 88250daa941e92f0bb87ce3f048de6e2bdf40990 feat(natter): scaffold libp2p connectivity service (v11.5 A1, separate Go module)
- ad6047cecbfcd3d487f85d2f2d272269983d5f5d feat(sync): /fed/v1/sync/push receive-side admission handler (step 3/8)
- 9500a7fba42ebdf235787c208c6e79de7576124f feat(sync): anti-entropy digest + reconcile loop (step 7/8)
- 603d1a1e71c135d08093af0da0ce68a7a49b9a29 feat(sync): commit-tail watcher for low-latency delivery (step 6/8)
- ffea255bee092a8024753c2060ea26b50b85a7ce feat(sync): domain-sync consent panel on the Federation page (Sprint 1 frontend)
- 4e9a5b808dbde7784f48d916b1f20dc8e6c93dcd feat(sync): resend action for undelivered items in the sync status panel
- 3168f1c7559959190f420a0a4d64ff6632c1195a feat(sync): sender client + outbox drainer - sync works end-to-end (steps 4-5/8)
- 3430e06c1a200311430bdc93b4977e79d1c9a614 feat(sync): status surface + reference docs (step 8/8)
- dd70fac4964285ff30c34a6fca3423875aef0a6c feat(sync): storage foundation for v11.5 domain sync (step 1/8)
- 109eb385b312b24e3d123f40a2bbcdeb7ce5875a feat(sync): sync_domains consent CRUD + revoke purge (step 2/8)
- 48b10aef5a4040194595c80b39c70aab2fb92e4f fix(federation): enable inbound listener by default + Settings on/off toggle
- ba294a9057e10933c76c045f2952ee9860a78030 fix(federation): readiness reads live app version from abci_info not stale /status
- eb6aa1bef282e801c56a01929f2402be0ce10aa4 fix(federation): restore TOTP seed cache at boot so federation survives a restart
- c4c8a5068673200b75fcce66ab5e7013b34e552e fix(federation): stop baking localhost into LAN join codes
- ac81d20b57d7b424038651f5234dc6061e7a6b2d fix(federation/sync): audit findings — toggle scope, #14 regression, SQL, config drift
- 9bee2db17f131fd4444b1906976f8d9fa7214e16 fix(natter): audit findings — honest relay-budget comment, buffer_size guard, README
- b5519bda21086577d950b141d755b3872f941cbe fix(sync): an offline peer never loses its backlog (closed-laptop resilience)
- edc4111b5f75ef06c76612a0b2fdb1536b4274f7 fix(sync): harden domain sync from adversarial review (28 findings)
- 03e88255ece34901608c05fb594bc31fa710a1b9 fix(ui): Settings page crash — FederationSettingRow used unimported fedSettingGet/Set
- bfb8f81128c1b44b946a37578c44c5a213478d3c release(v11.4.5): federation opt-in + domain-sync preview + reliability
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About l33tdawg/sage
Institutional memory for AI agents with real BFT consensus. 4 application validators vote on every memory before it's committed — no more storing garbage. 13 MCP tools, runs locally, works with any MCP-compatible model. Backed by 4 published research papers.
Related context
Related tools
Beta — feedback welcome: [email protected]