teolex2020/AuraSDK

v1.5.6 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 9d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 2 known CVEs

Topics

agent ai ai-agents cognitive embedded encryption

+5 more

llm memory offline python rust

Summary

AI summary

Immutable evidence lineage, deterministic context capsules, and recall outcome telemetry were added.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Medium	Adds immutable evidence lineage with SHA-256 binding between source revision, byte span, and Aura claim. Adds immutable evidence lineage with SHA-256 binding between source revision, byte span, and Aura claim. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Medium	Adds evidence-aware research ingestion APIs in Rust and Python with document revision, source-span integrity, verification status, and citation admission. Adds evidence-aware research ingestion APIs in Rust and Python with document revision, source-span integrity, verification status, and citation admission. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Medium	Adds context capsules providing deterministic, namespace-isolated, token-bounded hot context with selection reasons and stable content hashes. Adds context capsules providing deterministic, namespace-isolated, token-bounded hot context with selection reasons and stable content hashes. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Medium	Adds recall/search outcome telemetry counters for total, empty formatted recall, structured recall, tier recall, and exact search operations with Python bindings. Adds recall/search outcome telemetry counters for total, empty formatted recall, structured recall, tier recall, and exact search operations with Python bindings. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Medium	Adds release metadata gate in CI to validate GitHub tag, Rust crate, Python package, runtime version, and changelog agreement. Adds release metadata gate in CI to validate GitHub tag, Rust crate, Python package, runtime version, and changelog agreement. Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix
Bugfix	Medium	Fixes composition of evidence‑aware research reports to include only admitted findings, omitting free‑form synthesis until claim‑level lineage is supported. Fixes composition of evidence‑aware research reports to include only admitted findings, omitting free‑form synthesis until claim‑level lineage is supported. Source: llm_adapter@2026-07-17 Confidence: low	—
Bugfix	Medium	Prevents a valid integrity report for one source span from authorizing a claim bound to a different span. Prevents a valid integrity report for one source span from authorizing a claim bound to a different span. Source: granite4.1:30b@2026-07-17-audit Confidence: low	—
Bugfix	Medium	Prevents blocked evidence from being reintroduced through generated research synthesis. Prevents blocked evidence from being reintroduced through generated research synthesis. Source: granite4.1:30b@2026-07-17-audit Confidence: low	—
Bugfix	Low	Updates MCP stdio, MCP HTTP, and health responses to use the package __version__ instead of stale hard‑coded values. Updates MCP stdio, MCP HTTP, and health responses to use the package __version__ instead of stale hard‑coded values. Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix	Low	Corrects PyPI release metadata to link to the correct aura-memory project page. Corrects PyPI release metadata to link to the correct aura-memory project page. Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix	Low	Normalizes blocked and superseded metadata before context‑capsule filtering. Normalizes blocked and superseded metadata before context‑capsule filtering. Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix	Low	Includes primary formatted recall() path and cache hits in empty‑recall telemetry. Includes primary formatted recall() path and cache hits in empty‑recall telemetry. Source: llm_adapter@2026-07-17 Confidence: high	—

Full changelog

Immutable evidence lineage, deterministic context capsules, and observable recall outcomes.

Added

Immutable evidence lineage — SHA-256 binding between a source revision, its exact byte span, and an Aura claim, with independent verification and answer-permission gates.
Evidence-aware research ingestion — Rust and Python APIs for findings carrying document revision, source-span integrity, verification status, and citation admission.
Context capsules — deterministic, namespace-isolated, token-bounded hot context with selection reasons, omission counts, and stable content hashes.
Recall/search outcome telemetry — counters for total and empty formatted recall, structured recall, tier recall, and exact search operations, with Python bindings and reset support.
Release metadata gate — CI validation that the GitHub release tag, Rust crate, Python package, runtime version, and changelog agree.

Changed

Evidence-aware research reports are composed only from admitted findings. Free-form synthesis is omitted until synthesis can carry claim-level lineage.
MCP stdio, MCP HTTP, and health responses now use the package __version__ instead of stale hard-coded values.
PyPI release metadata now links to the correct aura-memory project page.
Repository metadata and documentation now use the canonical teolex2020/aura-memory GitHub URL.

Fixed

Prevented a valid integrity report for one source span from authorizing a claim bound to a different span.
Prevented blocked evidence from being reintroduced through a generated research synthesis.
Normalized blocked and superseded metadata before context-capsule filtering.
Included the primary formatted recall() path and cache hits in empty-recall telemetry.

Security Fixes

Prevented valid integrity report from authorizing claim bound to a different source span
Prevented blocked evidence from being reintroduced via generated research synthesis

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track teolex2020/AuraSDK

Get notified when new releases ship.

About teolex2020/AuraSDK

Persistent cognitive memory for Claude Desktop. Sub-ms recall, offline, encrypted.

All releases →