sheawinkler/ContextLattice

v3.3.21 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 20d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

agent-framework agent-orchestration ai-infra ai-interface context-engineering context-management

+4 more

go long-horizon-agents long-horizon-intelligence rust

Summary

AI summary

Rust runtime now handles all storage maintenance jobs, with Python fallback only if Rust unavailable.

Changes in this release

Type	Severity	Summary	CVE
Security	Medium	Patch for CVE-2026-45109. Patch for CVE-2026-45109. Source: llm_adapter@2026-05-21 Confidence: low	—
Feature	Medium	Move heavy maintenance transforms to Rust runtime. Move heavy maintenance transforms to Rust runtime. Source: llm_adapter@2026-05-21 Confidence: high	—
Bugfix	Medium	Treat topic_rollups lexical miss as empty result. Treat topic_rollups lexical miss as empty result. Source: llm_adapter@2026-05-21 Confidence: high	—

Full changelog

Highlights

promote first Rust storage maintenance crate: crates/context_storage_ops
route storage maintenance entrypoints through Rust wrapper: scripts/context_storage_ops.sh
cut over maintenance lanes to Rust execution path: ledger, weekly-lineage, cold-pack, cold-tier, archive-ndjson, fanout-gc
retain Python fallback only when Rust runtime is unavailable

Included changes since v3.3.20

feat(storage): move heavy maintenance transforms to Rust runtime (#206)
security(public): patch next to 16.2.6 for CVE-2026-45109 (#205)
fix(gateway): treat topic_rollups lexical miss as empty result (#204)

Validation

cargo test -p context_storage_ops (pass)
operational dry-runs for ledger + weekly-lineage + cold-pack + cold-tier + archive-ndjson + fanout-gc on WD Black paths
runtime health check via http://127.0.0.1:8075/health

Security Fixes

CVE-2026-45109 patched by upgrading next to version 16.2.6

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track sheawinkler/ContextLattice

Get notified when new releases ship.

About sheawinkler/ContextLattice

Private-by-default memory and context layer for agents with Go/Rust runtime, staged retrieval across fused data backends, and long-horizon context continuity.