memstrand/memstrand

Review signals: 1 connection review.

Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 35 distinct locations. 10 attributed processes.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• Hard scope isolation: a memory scoped to one task is not returned to an unrelated task: Real input produced the expected result: (no memories found)

  Source: - Hard scope isolation — session/task/host is a filter applied before ranking, not a signal

  Input: recall 'mini PC' under unrelated task disk-cleanup

  Expected: (no memories found)

  Command: <guest-path> recall 'mini PC' --task disk-cleanup

  Observed: (no memories found)

• Search by meaning, not keywords: Real input produced the expected result: cognita-pulse

  Source: 2. **Search by meaning**, not keywords.

  Input: what is the small computer on my desk called?

  Expected: memory mentioning cognita-pulse is returned

  Command: <guest-path> recall 'what is the small computer on my desk called?' --task homelab

  Observed: cognita-pulse id=mem:f5e07e3a1add4647 scope=homelab

Examples

• Acceptance rubric: remember, recall by meaning, and no cross-task leak against a persistent store: command completed successfully

  Source: README.md#acceptance-test (examples/quickstart.py)

  Input: no arguments; uses MEMSTRAND_HOME store

  Expected: all three tests pass

  Command: <guest-path> examples/quickstart.py

  Observed: test 2 (semantic recall): [{'id': 'mem:f5e07e3a1add4647', 'score': 0.8591283596433427, 'content': "Chiran's mini PC is named cognita-pulse", 'category': 'fact', 'provenance': 'explicit_statement', 'confidence': 0.95, 'task_id': 'homelab', 'scopes': ['homelab'], 'tags': [], 'host': None, 'source': None, 'source_ref': None, 'created_at': '2026-10-23T20:07:58.199159+00:00', 'similarity': 0.7425051700805104, 'keyword': True, 'superseded': False, 'neighbors': [], 'contradictions': []}] test 3 (no cross-task leak): [] test 3b (unscoped query): [] all three tests pass

Cycles

• Background scheduler periodically runs consolidate() (expire, decay, dedup, replay): Triggered one cycle by hand (run-once: manual invocation of the same Memory.consolidate() via the CLI, no source edits; normal trigger: periodic background loop started by memstrand serve (consolidate_seconds)): { "expired": 0, "edges_pruned": 0, "duplicates_linked": 0, "replayed": 0, "distilled": { "skipped": "local LLM unreachable" } }

  Source: src/memstrand/server.py

  Input: memstrand consolidate against MEMSTRAND_HOME store

  Expected: consolidation summary JSON printed, expired count reported

  Command: <guest-path> consolidate

  Observed: { "expired": 0, "edges_pruned": 0, "duplicates_linked": 0, "replayed": 0, "distilled": { "skipped": "local LLM unreachable" } }

Local or hosted: local

Store a memory with the CLI, read it back by meaning through the CLI and the MCP stdio server (recall tool), confirm it does not leak into an unrelated task, and run the README acceptance example.

cd <guest-path> && pwd && ls -la && git status 2>&1 | head -3; id -u; python3 --version; cat /etc/os-release | head -2; ls /inputs 2>&1
cd <guest-path> && cat README.md 2>/dev/null | head -200
cd <guest-path> && grep -n -i "requires-python\|^name\|version\|scripts" -A2 pyproject.toml | head -40; echo ---; cat Makefile; echo ---; ls examples tests scripts; echo ---; cat .gitignore; ls -la .coldpass
cd <guest-path> && git init -q && git remote add origin https://github.com/memstrand/memstrand && timeout 120 git fetch --depth 1 origin a22dc07381fd1b6ab090e4ddacf377df0ef68538 2>&1 | tail -5; git reset --mixed FETCH_HEAD 2>&1 | tail -2; git log --oneline -1 2>&1
python3 -m venv <guest-path> 2>&1 | tail -3 || true; ls <guest-path> 2>/dev/null || (sudo -n apt-get update -qq && sudo -n apt-get install -y -qq python3-venv python3-pip ><guest-path> 2>&1; python3 -m venv <guest-path> && echo VENV_OK)
cd /tmp && <guest-path> -m pip --version && <guest-path> install -q memstrand 2>&1 | tail -15; echo EXIT=$?; <guest-path> show memstrand 2>&1 | head -3; ls <guest-path> | grep memstrand
cd <guest-path> && head -c 3500 docs/cli.md; echo; echo ----; <guest-path> --help 2>&1 | head -40
cd <guest-path> && cat examples/quickstart.py | head -80
cd <guest-path> && export MEMSTRAND_HOME=<guest-path> && timeout 600 <guest-path> remember "Chiran's mini PC is named cognita-pulse" --task homelab 2>&1 | tail -15; echo EXIT=${PIPESTATUS[0]}
cd <guest-path> && export MEMSTRAND_HOME=<guest-path> && <guest-path> recall "what is the mini PC called?" --task homelab 2>/dev/null; echo EXIT=$?; echo ---unrelated; <guest-path> recall "mini PC" --task disk-cleanup 2>/dev/null; echo EXIT=$?
cd <guest-path> && grep -rn "@mcp.tool\|def remember\|def recall\|name=\"remember\|name=\"recall" src/memstrand/*.py | head -30; grep -rn -i "bearer\|MEMSTRAND_TOKEN\|api.key" docs/configuration.md | head -8
cd <guest-path> && sed -n 85,175p src/memstrand/mcp_server.py
cd <guest-path> && grep -rn -i "schedul\|interval\|every.*sec\|while True\|--once\|--now\|def consolidate" src/memstrand/*.py | head -30; echo ---; grep -n "consolidat" docs/cli.md | head; echo ---; grep -n "pytest\|\[project.optional" -A3 pyproject.toml | head -20
cd <guest-path> && sed -n 970,1010p src/memstrand/server.py; echo ---; sed -n 60,68p docs/cli.md
cd <guest-path> && export MEMSTRAND_HOME=<guest-path> && <guest-path> consolidate 2>/dev/null; echo EXIT=$?; echo ---; timeout 900 <guest-path> examples/quickstart.py 2>/dev/null; echo EXIT=$?
cd <guest-path> && mkdir -p .coldpass && cat > .coldpass/probe.json <<'EOF'
{"kind":"mcp","argv":["<guest-path>","mcp"],"cwd":"<guest-path>","env":{"MEMSTRAND_HOME":"<guest-path>"},"tool":"recall","arguments":{"query":"what is the mini PC called?","task_id":"homelab"},"expected_text":"cognita-pulse"}
EOF
cat > .coldpass/claims.json <<'EOF'
[
{"kind":"claim","claim":"Hard scope isolation: a memory scoped to one task is not returned to an unrelated task","source":"- **Hard scope isolation** — session/task/host is a filter applied before ranking, not a signal","input":"recall 'mini PC' under unrelated task disk-cleanup","expected":"(no memories found)","probe_kind":"cli","argv":["<guest-path>","recall","mini PC","--task","disk-cleanup"],"env":{"MEMSTRAND_HOME":"<guest-path>"},"expected_text":"(no memories found)","cwd":"<guest-path>"},
{"kind":"claim","claim":"Search by meaning, not keywords","source":"2. **Search by meaning**, not keywords.","input":"what is the small computer on my desk called?","expected":"memory mentioning cognita-pulse is returned","probe_kind":"cli","argv":["<guest-path>","recall","what is the small computer on my desk called?","--task","homelab"],"env":{"MEMSTRAND_HOME":"<guest-path>"},"expected_text":"cognita-pulse","cwd":"<guest-path>"}
]
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"Acceptance rubric: remember, recall by meaning, and no cross-task leak against a persistent store","source":"README.md#acceptance-test (examples/quickstart.py)","input":"no arguments; uses MEMSTRAND_HOME store","expected":"all three tests pass","argv":["<guest-path>","examples/quickstart.py"],"cwd":"<guest-path>","env":{"MEMSTRAND_HOME":"<guest-path>"},"expected_text":"all three tests pass"}]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":true,"checks":[{"claim":"Background scheduler periodically runs consolidate() (expire, decay, dedup, replay)","source":"src/memstrand/server.py","quote":"        if now - last_consolidate >= consolidate_seconds:","schedule":"periodic background loop started by memstrand serve (consolidate_seconds)","method":"run-once: manual invocation of the same Memory.consolidate() via the CLI, no source edits","input":"memstrand consolidate against MEMSTRAND_HOME store","expected":"consolidation summary JSON printed, expired count reported","kind":"cli","argv":["<guest-path>","consolidate"],"cwd":"<guest-path>","env":{"MEMSTRAND_HOME":"<guest-path>"},"expected_text":"\"expired\": 0"}]}
EOF
for f in probe claims examples cycles; do <guest-path> -c "import json,sys;json.load(open(sys.argv[1]));print('ok',sys.argv[1])" .coldpass/$f.json; done
cd <guest-path> && grep -n "Hard scope isolation\|Search by meaning" README.md
cd <guest-path> && <guest-path> -I - <<'EOF'
import json
p='.coldpass/claims.json'
c=json.load(open(p))
c[0]['source']='- Hard scope isolation — session/task/host is a filter applied before ranking, not a signal'
json.dump(c,open(p,'w'),indent=1,ensure_ascii=False)
print(open('README.md',encoding='utf-8').read().count(c[0]['source']), open('README.md',encoding='utf-8').read().count(c[1]['source']))
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | tail -60
cd <guest-path> && mkdir -p .coldpass && cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Store a memory with the CLI, read it back by meaning through the CLI and the MCP stdio server (recall tool), confirm it does not leak into an unrelated task, and run the README acceptance example.","operation_scope":"Linux (Ubuntu 24.04, Python 3.12.3), PyPI memstrand 0.3.0 (matches pinned commit a22dc07 pyproject version), local embedded store under MEMSTRAND_HOME=<guest-path>, local ONNX embedding model (downloaded from Hugging Face on first use). No LLM endpoint configured; no daemon started.","steps":["git init; git remote add origin https://github.com/memstrand/memstrand; git fetch --depth 1 origin a22dc07381fd1b6ab090e4ddacf377df0ef68538; git reset --mixed FETCH_HEAD","python3 -m venv <guest-path> (after apt-get install python3-venv python3-pip)","<guest-path> install memstrand (README Quickstart)","<guest-path> remember \"Chiran's mini PC is named cognita-pulse\" --task homelab","<guest-path> recall \"what is the mini PC called?\" --task homelab","<guest-path> recall \"mini PC\" --task disk-cleanup (returned no memories)","<guest-path> mcp (MCP stdio, tool recall)","<guest-path> consolidate (one manual cycle of the scheduler's consolidate step)","<guest-path> examples/quickstart.py (README acceptance test)"],"deviations":["<guest-path> was not a git repository; ran git init and the pinned fetch/reset as instructed (fetch succeeded).","System python3 could not create a venv (python3-venv missing); installed python3-venv and python3-pip with sudo apt-get (guest is ubuntu uid 1000 with passwordless sudo).","Installed the README's PyPI package (pip install memstrand) into <guest-path> instead of the Makefile's editable install from the checkout (make install / pip install -e '.[dev,all]' not run). PyPI version 0.3.0 matches the pinned pyproject version.","No local LLM endpoint is configured, so distillation (improve) is skipped; consolidate reports 'local LLM unreachable'. The distillation half of the product was not exercised.","The background scheduler is not run as a long-lived daemon; the consolidate cycle was triggered by hand with the CLI, which calls the same Memory.consolidate() method.","Repository pytest suite (make test) not run; only the README acceptance example and CLI/MCP operations were exercised.","Embedding model (BAAI/bge-small via fastembed) downloaded from Hugging Face on first use; this needed network access."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":"None required for the tested path. Optional: configure a local LLM endpoint to exercise improve()/distillation, and run the repo's pytest suite via make install then make test."}
EOF
<guest-path> -c "import json;json.load(open('.coldpass/report.json'));print('report ok')"; <env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | head -c 400; echo; ps aux | grep -c "[m]emstrand"
ps -eo pid,etime,args | grep "[m]emstrand" | cut -c1-200