This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
Summary
AI summaryAdds retrieval receipts showing why each piece of evidence mattered.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds canonical `memory_trust_assessment.v1` and `retrieval_decision_trace.v1` to every Context Pack. Adds canonical `memory_trust_assessment.v1` and `retrieval_decision_trace.v1` to every Context Pack. Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Medium |
Introduces `contextlattice retrieval-governance` CLI command for governance operations. Introduces `contextlattice retrieval-governance` CLI command for governance operations. Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
Provides same‑snapshot ablation reports showing exact result, rank, and citation deltas. Provides same‑snapshot ablation reports showing exact result, rank, and citation deltas. Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
Enables immutable regression proposals and advisory evidence reputation from verified outcomes. Enables immutable regression proposals and advisory evidence reputation from verified outcomes. Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
Requires typed current evidence and citations for cross‑project causal explanations, abstaining on lexical similarity alone. Requires typed current evidence and citations for cross‑project causal explanations, abstaining on lexical similarity alone. Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
Defines product boundary: public core, Team additions, Operator/Enterprise governance controls. Defines product boundary: public core, Team additions, Operator/Enterprise governance controls. Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
Specifies rollback procedure: set ranking influence to zero and deactivate paid T4 governance policies. Specifies rollback procedure: set ranking influence to zero and deactivate paid T4 governance policies. Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Bugfix | Medium |
Fails closed on prompt overrides, secret exfiltration, encoded instructions, destructive claims, self‑awarded trust, and coordinated risky paraphrases. Fails closed on prompt overrides, secret exfiltration, encoded instructions, destructive claims, self‑awarded trust, and coordinated risky paraphrases. Source: llm_adapter@2026-07-19 Confidence: low |
— |
| Bugfix | Medium |
Ensures legitimate bounded runbooks remain usable while quarantined material receives zero ranking and prompt influence. Ensures legitimate bounded runbooks remain usable while quarantined material receives zero ranking and prompt influence. Source: llm_adapter@2026-07-19 Confidence: low |
— |
Full changelog
ContextLattice v3.21.0
Retrieval Receipts
ContextLattice can now show not only what an agent received, but why every
piece of evidence was allowed to matter.
The CLI remains the primary interface. HTTP remains the integration fallback.
What changed
- Every Context Pack carries one canonical
memory_trust_assessment.v1and one
retrieval_decision_trace.v1, with compact references instead of repeated
payloads. - Prompt overrides, secret exfiltration, encoded instructions, destructive
claims, self-awarded trust, and coordinated risky paraphrases fail closed. - Legitimate bounded runbooks remain usable; quarantined material receives zero
ranking and prompt influence. - Same-snapshot ablation reports exact result, rank, and citation deltas without
inventing utility. - Independently verified outcomes can produce immutable, review-only regression
proposals and advisory evidence reputation. - Cross-project causal explanations require typed current evidence and
citations; lexical or associative similarity alone always abstains. - The Go-native CLI exposes
contextlattice retrieval-governancefor entitled
receipt, bridge, counterfactual, reputation, regression, and defense policy.
Product boundary
The public core includes local receipts, trust isolation, quarantine, ablation,
regression proposals, advisory reputation, and causal explanations. Team adds
receipt and causal-bridge governance. Operator and Enterprise add continuous
counterfactual, reputation, regression, and defense operations.
Paid governance controls policy, bounded retention, scheduling, and incident
review only. It does not execute retrieval, mutate ordinary memory, delete
immutable evidence, or disable public defenses.
Rollback
Set optional ranking influence to zero and deactivate paid T4 governance
policies. Keep the last-known-good public trust rules fail closed. Security
defenses are not a rollback target and cannot be disabled through an
entitlement.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About sheawinkler/ContextLattice
Private-by-default memory and context layer for agents with Go/Rust runtime, staged retrieval across fused data backends, and long-horizon context continuity.
Related context
Related tools
Beta — feedback welcome: [email protected]