惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

V2EX - 技术
V2EX - 技术
P
Privacy International News Feed
Security Latest
Security Latest
H
Hacker News: Front Page
T
Tenable Blog
The Hacker News
The Hacker News
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
S
Security @ Cisco Blogs
Project Zero
Project Zero
O
OpenAI News
AI
AI
Spread Privacy
Spread Privacy
C
CERT Recently Published Vulnerability Notes
The Last Watchdog
The Last Watchdog
G
GRAHAM CLULEY
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
Scott Helme
Scott Helme
Application and Cybersecurity Blog
Application and Cybersecurity Blog
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
C
CXSECURITY Database RSS Feed - CXSecurity.com
NISL@THU
NISL@THU
A
Arctic Wolf
T
Threat Research - Cisco Blogs
PCI Perspectives
PCI Perspectives
N
News and Events Feed by Topic
C
Cyber Attacks, Cyber Crime and Cyber Security
C
Cybersecurity and Infrastructure Security Agency CISA
Simon Willison's Weblog
Simon Willison's Weblog
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
Know Your Adversary
Know Your Adversary
Google Online Security Blog
Google Online Security Blog
罗磊的独立博客
L
LINUX DO - 最新话题
U
Unit 42
S
Security Affairs
有赞技术团队
有赞技术团队
WordPress大学
WordPress大学
博客园 - 【当耐特】
T
The Exploit Database - CXSecurity.com
S
Schneier on Security
月光博客
月光博客
Engineering at Meta
Engineering at Meta
腾讯CDC
F
Full Disclosure
Cyberwarzone
Cyberwarzone
S
SegmentFault 最新的问题
Recorded Future
Recorded Future
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
博客园 - 司徒正美
The Cloudflare Blog

Show HN

GitHub - steveking-gh/firmion: Firmion is DSL and engine for firmware image generation. GitHub - villagesql/villagesql-skills: Agent skills for VillageSQL - gemini-cli-extension; claude-code-plugin GitHub - flightdeckhq/flightdeck: Observability and control plane for AI agents. CSP Radar GitHub - Light-Heart-Labs/DreamServer: Turn your PC, Mac, or Linux box into an AI server. LLM inference, chat UI, voice, agents, workflows, RAG, and image generation. GitHub - Diplomat-ai/diplomat-agent-ts: What can your TypeScript AI agent do to the real world? Scan your code. See which tool calls have zero checks Code Block Selector - Visual Studio Marketplace Prometheus dependency graph — interactive showcase | Riftmap Show HN: I made a vi-like modal keyboard plugin for Figma GitHub - run-llama/liteparse: A fast, helpful, and open-source document parser GitHub - dalemyers/Roar: A macOS CLI tool for notifications GitHub - district-solutions/open-agent-tools-coder: Enables small-to-large self-hosted ai models to use local source code when running tool-calling agentic workloads. We actively data mine 20,900+ (2+ TB) popular github repos using large and small ai models to create reuseable: json, markdown and parquet files for local-first tool-calling models. GitHub - progapandist/stripeek: A local TUI proxy for real-time Stripe API debugging, built for navigating complex payloads fast. GitHub - sir1st/hermes-desktop: All-in-one cross-platform desktop app for Hermes Agent — bundles Python + hermes-agent + hermes-web-ui GitHub - astefanutti/shaderbang: Shebang for Shaders Show HN: Generate Claude Code Workflows using Spec Driven Development approach GitHub - nixys/nxs-universal-chart: The Helm chart you can use to install any of your applications into Kubernetes/OpenShift Show HN: AI agents for UK GDAD PCF roles and their skills The Two Pillars: Mixer Mode and Meta-Software in the Reorganization of Software Work After AI GitHub - JaiCode08/teleport-env What 1,000+ Harness Experiments Taught Me About Self-Improving Agents Show HN: Liiists, a Markdown-first, iOS and CLI list app SwiperTab – Get this Extension for 🦊 Firefox (en-US) GitHub - kouhxp/fftext: Summarize, explain, fact-check, or translate any text, URL, or file. No GPU. No cloud. One command GitHub - sweetpad-dev/sweetpad: Develop Swift/iOS projects using VSCode GitHub - dogmaticdev/IRON: IRON a.k.a. Intermediate Representation Object Notation is a Interpreter/Database that is used to create Programming Languages. GitHub - sjhalani7/vaen: Package your AI coding harness into a portable .agent file, and share it across repos, teams, & the community without ever having to copy-paste instructions, skills, MCP config, or secrets. Show HN: Gandalf the Grader Show HN: Citadeld – replay any CI failure locally from a single file GitHub - tdortman/cuSBF: High-Performance GPU Super Bloom Filter coral-ai/claude-code-token-xray at main · Coral-Bricks-AI/coral-ai GitHub - ulyssestenn/funes: Funes is a Git-based framework for LLM-managed knowledge work: an AI Librarian ingests raw sources, builds an interlinked Markdown knowledge base, and uses it to produce cited reports, analyses, and other outputs. GitHub - ThatXliner/gah: Git Add Hunk, built for agents to use GitHub - harmont-dev/harmont-cli: Command-line client for the Harmont CI platform GitHub - brooksmcmillin/mcp-authflow: OAuth 2.0 Authorization Server framework for MCP servers GitHub - javaid-codes/audit-supply-chain-agents GitHub - amorey/gochan: A small library of common channel architectures for Go, inspired by Rust GitHub - arifozgun/OpenGem: Free, Open-Source AI API Gateway with Gemini, OpenAI & Anthropic Compatibility in 1 file GitHub - Pranesh950/BioPetals: 🌸 Run BIOxAI models at home, BitTorrent-style. Fine-tuning and inference up to 10x faster than offloading GitHub - cnguyen14/bounty-doctor: Diagnose a GitHub bounty issue before you waste hours: detects honeypot scam repos, AI-bot attempt swarms, and stale contests. Show HN: CoreMCP – MCP Server for On-Prem DBs Show HN: KittyHTML – Render HTML/CSS as an inline image in your terminal GitHub - bingud/filemat: Web-based file manager Show HN: TruthLens – Free multi-signal deepfake image detector GitHub - apexlocal-jz/claude-usage-tray: Windows system-tray app showing your Claude Code rate-limit usage at a glance. Zero deps, ~300 lines of PowerShell. Cross-IDE (works regardless of VS Code, Cursor, plain terminal). Release v0.1.2.1 · kouhxp/yapsnap GitHub - noopolis/moltnet: Self-hostable chat network for AI agents. Pre-built bridges for Claude Code, Codex, and the Claws. Rooms, DMs, history. No Slack bots, no Matrix, no glue code. GitHub - tamerh/enju: Coordinating Humans, AI Agents, and Compute as Peers on a Shared Workflow Graph Show HN: Continuity-auth – Respect-weighted rate limits for the open web GitHub - luml-ai/luml: AI lifecycle platform where engineers and agents track experiments, train models, and ship to production. GitHub - mrdanielcasper/CoreTex: A UNIX-inspired, biomimetic, flat-file AI harness and knowledge engine. GitHub - clemg/pierre-github: Pierre's diffs.com and trees.software for Github GitHub - lyriks-io/unspaghettit: Behavior-driven AI development without prompt spaghetti. GitHub - sofumel/claude-handoff-revive: Resume Claude Code work after rate/usage/context limits without replaying the prior transcript. Auto-saves at 90%/95% usage. Plugin-installable, 10 languages. GitHub - dotexorg/saferpc: Typed, end-to-end encrypted RPC over any bidirectional channel. GitHub - BeeZeeAgent/beezee: Agent harness orchestration Legato Next.js Boilerplate for Internal Tools · CoreUI GitHub - clark-labs-inc/clark-hash: Clark Hash, 32x smaller searchable sketches for embeddings GitHub - ZeroPointRepo/youtube-mcp: The fastest YouTube transcript + YouTube search MCP for AI agents. Try for free. Typing Mastery — climb toward 100+ WPM, deliberately GitHub - Andebugulin/Awareen GitHub - fayzan123/claude-workflow-composer: Visual desktop app for composing multi-agent coding workflows. Drag agents, attach skills and MCPs, wire handoffs, export to .claude/ GitHub - harshaneel/humanize: Best static AI text humanizer. Two research-grounded skills that work in any LLM (Claude, ChatGPT, Gemini, Codex): humanize beats perplexity-based detectors, ai-check produces forensic scoring with evidence-quoted flags. Nine levers, 50+ peer-reviewed sources, 2024-2026 detection literature. GitHub - StackOneHQ/stack-nudge GitHub - nodes-app/swift-markdown-engine: A native AppKit Markdown editor for macOS, built on TextKit 2 and bridged to SwiftUI. We hardened an LLM agent. Each defense we added made it more exploitable. GitHub - alkait/WhatsKept: Agent-queryable WhatsApp history from an iOS backup — a single Go binary. GitHub - octelium/cordium: Open-source, general-purpose sandbox platform for devs and AI agents that provides identity-based secure access to infrastructure without credentials. WAR.GOV/UFO Microfilm5 GitHub - scosman/videowright: Build animated explainer videos with your coding agent GitHub - dipankar/dscode: The code editor you can take apart. GitHub - zoharbabin/web-researcher-mcp: MCP server (Go) for AI assistants: web search, content extraction, academic/patent/news research. Multi-provider routing, 4-tier scraping, search lenses. Works with Claude, Cursor, and any MCP client. GitHub - ruvnet/RuView: π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection — all without a single pixel of video. GitHub - scanaislop/aislop: Catch the slop AI coding agents leave in your code: narrative comments, swallowed exceptions, as-any casts, dead code, oversized functions. 50+ rules across 7 languages (TypeScript, JavaScript, Python, Go, Rust, Ruby, PHP). Sub-second, deterministic, no LLM at runtime. MIT-licensed. GitHub - kouhxp/cheap-im: CPU-only voice agent approximating Thinking Machines' Interaction Models demo GitHub - unprovable/OrchidMantis: Orchid Mantis — standalone framework for Zero-Knowledge Proofs of eXploit (ZKPoX). GitHub - MarcellM01/TinySearch: Shrink the web for your local LLMs! GitHub - TangibleResearch/Halgorithem: A Algo designed to detect AI Hallucitions GitHub - DO-SAY-GO/freelang: I love freelang GitHub - CarpseDeam/Aura-IDE: An AI coding harness that shaped itself - Planner/Worker agents, repo awareness, surgical edits, validation, recovery, and safe diff approvals. GitHub - chojs23/concord: A feature-rich TUI client for Discord GitHub - tommyjepsen/awesome-ux-skills: UX & AI Product designs skills you can use today in Claude Code GitHub - aerf-spec/aerf: Agent Evidence Receipt Format (AERF) — an open specification for tamper-evident, independently verifiable records of AI agent actions. GitHub - kklimuk/docx-cli: CLI for AI agents (Claude, Codex) to read, edit, and comment on .docx files with full format fidelity. GitHub - Jwrede/tokentoll: Catch LLM cost changes in code review. Infracost for LLM spend. GitHub - samchon/ttsc: A `typescript-go` toolchain for compiler-powered plugins and type-safe execution + 500x faster lint integrated into compiler GitHub - Higangssh/homebutler: 🏠 Manage your homelab from chat. Single binary, zero dependencies. GitHub - olalie/tapmap: See where your computer connects and what stands out on a live world map. GitHub - Diplomat-ai/diplomat-agent: What can your AI agent do to the real world? Scan your code. See which tool calls have zero checks GitHub - Bajusz15/beacon: Open-source agent for secure remote access, monitoring, and deploys across home-lab and self-hosted machines like Raspberry Pi, N100, or any Linux server. Open web based TTY or tunnel Home Assistant and other local services securely without opening ports. BigTech AI News - Chrome 应用商店 GitHub - vinhnx/VTCode: VT Code is an open-source coding agent with LLM-native code understanding and robust shell safety. Supports multiple LLM providers with automatic failover and efficient context management. GitHub - michaelaz774/decision-engine: A decision operating system for startup founders, powered by Claude Code. Synthesizes wisdom from 25+ legendary founders and investors into interactive AI-driven decision frameworks. GitHub - Chrilleweb/dotenv-diff: Validate environment variable usage in your codebase GitHub - Lumen-Labs/brainapi2: BrainAPI is a knowledge graph–powered AI memory layer that transforms unstructured data into structured knowledge, enabling intelligent search, recommendations, and contextual memory for AI agents and applications. GitHub - familiar-software/familiar: Let AI watch you work. Familiar lets your AI update its memory, skills, and knowledge by watching your screen. GitHub - skorotkiewicz/rudo: A small, elegant dock for Wayland GitHub - muxshed/shed: One stream in, or many. Every destination, simultaneously. No cloud middleman, no per-channel fees, no limits. make sidebar/address bar rounded corner toggleable
GitHub - las7/memharness: Bi-temporal agent long-term memory: SQLite-backed MCP server with recall ranking, hybrid vector+FTS recall, and a source-staleness signal
sakuraiben · 2026-06-18 · via Show HN

A bi-temporal, provenance-carrying memory primitive for AI agents. One SQLite file. No LLM or network calls in the storage layer. Exposed to any agent via MCP.

Most agent memory is a bag of strings. memharness stores facts, and combines three semantics that incumbents tend to split apart:

  1. Bi-temporal: every fact records when it became true in the world (valid_from/valid_to) separately from when the agent learned it (tx_at). So you can ask: "what did you believe on March 1st?"
  2. Supersession, never deletion: corrections close the old fact and link it to its successor. "What did you think before I corrected you?" has an answer.
  3. Provenance per fact: every memory cites who said it, where, and when. "Why do you believe that?" has an answer. So does "forget everything from that session."

The storage layer is deterministic: no LLM, no network, no background daemon. It's plain SQLite, so you can open the file with any client.

An agent learns a deploy target, the user corrects it weeks later, and recall / as_of / why / diff explain what was believed when.

Run it yourself: cd examples && npm install && npm run demo

When to use this (and when not to)

memharness is not a magic accuracy upgrade, and it is honest about that. If your agent's memory is small and static and comfortably fits the context window, a CLAUDE.md file (or just stuffing the history into the prompt) is simpler, and on short histories full context will match or beat any external memory system.

Reach for memharness when:

  • History outgrows the window: months of facts, many subjects, more than you want to (or can) paste into every prompt.
  • You need an audit trail: "what did the agent believe when it made this decision?" (as_of), "what changed since Monday?" (diff), "why does it believe this?" (why). These are queries a bag of strings cannot answer.
  • You need provenance-scoped deletion: "forget everything from that session/file/source" in one call (GDPR-shaped, not a string search).
  • Beliefs change over time: corrections should supersede, not silently overwrite, so old reasoning stays explainable.

How it compares

Honest, and pointed at the thing memharness actually does differently: it is a deterministic, auditable storage layer rather than an extraction service.

Storage LLM calls to write as_of / diff / why Embeddable / self-host
memharness one SQLite file none yes: bi-temporal + provenance yes, it's a library
mem0 hosted / OSS service yes (extraction pipeline) partial / no partial
Zep / Graphiti hosted graph yes (LLM ingestion) bi-temporal, but LLM-built partial
Letta / MemGPT agent framework + DB yes (agent-managed) no yes
Anthropic memory tool client-side files model edits files no (model picks) yes
plain CLAUDE.md / files text files none no yes

Where the others win, plainly: mem0 and Zep do automatic fact extraction from raw conversation, which memharness deliberately does not (the write path stays model-free; a client or skill decides what is worth remembering). Plain CLAUDE.md needs no install at all. memharness earns its place when you need the temporal and provenance queries the others don't offer.

Packages

Package What it is
@memharness/core TypeScript library: schema, migrations, write path, recall ranking. No model, no network.
@memharness/mcp MCP server (stdio) exposing the seven tools to any MCP client.
@memharness/embed Optional. A local embedding model for hybrid (semantic) recall. Not installed by default.

Quick start (MCP)

The default install is small (SQLite plus the MCP SDK); the embedding model is opt-in, see Hybrid recall.

Claude Code:

claude mcp add memharness -- npx -y @memharness/mcp

Claude Desktop (~/Library/Application Support/Claude/claude_desktop_config.json) and Cursor (~/.cursor/mcp.json) use the same JSON shape:

{
  "mcpServers": {
    "memharness": { "command": "npx", "args": ["-y", "@memharness/mcp"] }
  }
}

Codex (~/.codex/config.toml) uses TOML, not JSON:

[mcp_servers.memharness]
command = "npx"
args = ["-y", "@memharness/mcp"]

The database lives at ~/.memharness/memory.db (override with MEMHARNESS_DB; XDG_DATA_HOME is honored on Linux). Nothing else is written unless you turn on the optional debug log.

First run

  1. Add the server with one of the commands above, then restart your client so it picks up the new MCP server.
  2. In a conversation, hand the agent a durable fact, e.g. "remember that I deploy this project with Fly.io." It calls remember.
  3. Later (or in a fresh session) ask "what do you know about how I deploy?" It calls recall and answers from memory. Correct it and it calls revise; the old belief becomes history, queryable with as_of / why / diff.

No API key, no signup, no network. The first remember creates the SQLite file and that's the whole setup. To watch the tools work end to end without an agent, run the demo: cd examples && npm install && npm run demo.

Optional: make recall automatic

By default the agent decides when to call recall. To push relevant memory in at the start of every session instead (more reliable than hoping the model remembers to look), add a Claude Code SessionStart hook that runs the bundled memharness-context tool, whose stdout is injected into context:

{
  "hooks": {
    "SessionStart": [
      { "hooks": [ { "type": "command",
        "command": "npx -y -p @memharness/mcp memharness-context --subject user" } ] }
    ]
  }
}

It prints a compact dump of the most relevant current beliefs (and exits quietly if there's nothing yet), so the agent starts each session already knowing the durable facts. Pass --subject more than once to inject several entities.

The seven tools

Tool What it does The thesis it tests
remember store an atomic fact with confidence + provenance facts > blobs
recall ranked current beliefs; as_of returns beliefs at a past instant bi-temporal
revise supersede a belief, keep history supersession > deletion
diff what changed since a date (learned/revised/retracted) the audit demo
why provenance + full revision chain for a fact trust / audit
forget tombstone by id or by source (provenance-based deletion) GDPR-shaped
stats counts, subjects, schema version

Library use

import { Memharness } from "@memharness/core";

const mem = Memharness.open(); // ~/.memharness/memory.db

// Learn something now, then learn it was actually true earlier.
const { id } = mem.remember({
  subject: "user",
  fact: "lives in Osaka",
  sourceRef: "session-2026-06-09",
});
mem.revise({ oldFactId: id, newFact: "lives in Tokyo", validFrom: "2026-05-01" });

mem.recall({ query: "lives" }).facts[0].fact;   // "lives in Tokyo" (current belief)
mem.diff({ since: "2026-06-01" });               // { learned, revised, retracted }
mem.why(id);                                     // { fact, ancestors, descendants }

recall returns a RecallResult ({ facts: ScoredFact[]; asOf; truncated; usedFallback }), not a bare string. asOf time-travels: mem.recall({ query: "lives", asOf: "2026-04-15" }) returns what was believed as held on that date. That honors transaction time, so a fact learned today is not visible to a query about the past.

Recall ranking is reciprocal-rank fusion over FTS5 BM25 (plus a vector rank when hybrid recall is enabled), times confidence, times recency decay (90-day half-life, configurable), scored in SQL. An optional maxTokens budget caps output for context windows. A substring fallback catches partial words and typos, in both FTS-only and hybrid modes.

Optional: hybrid recall

By default, recall is FTS5 keyword search plus recency/confidence ranking: no model, fully offline. Hybrid recall adds a semantic leg via a local embedding model (BGE-small, ~130MB, downloaded once from the HuggingFace hub then fully offline: no API key, no per-query network). Enable it in two steps:

  1. Install the optional embedding package alongside the server. With npx:

    npx -y -p @memharness/mcp -p @memharness/embed memharness-mcp

    (or npm i -g @memharness/embed for a global install).

  2. Set MEMHARNESS_HYBRID=1 in the server's environment.

The server then keeps stored facts embedded automatically: facts you remember become semantically searchable on the next recall, with no separate backfill step. The first hybrid recall prints download progress to stderr while the model loads. If the package isn't installed, the server says so and stays FTS-only; it never fails closed.

At the library level, recall is embedding-provider-agnostic: pass your own query vector to recall({ queryVector }) and attach document vectors with setEmbedding(...), from any model you like.

A worked example

Two sessions, weeks apart. The agent learns a preference, the user later corrects it, and a downstream question asks what the agent believed at the time:

// June 9: the agent learns a deploy target and acts on it.
const { id } = mem.remember({
  subject: "project:acme",
  fact: "deploys via Heroku",
  sourceRef: "session-2026-06-09",
});

// June 16: turns out the team moved to Fly back on June 1.
mem.revise({
  oldFactId: id,
  newFact: "deploys via Fly.io",
  validFrom: "2026-06-01",
  sourceRef: "session-2026-06-16",
});

mem.recall({ subject: "project:acme" }).facts[0].fact; // "deploys via Fly.io"

// "Why did the CI config you wrote on June 9 target Heroku?"
mem.recall({ subject: "project:acme", asOf: "2026-06-09" }).facts[0].fact;
//   "deploys via Heroku": what the agent honestly believed that day.

mem.why(id);   // the full chain: Heroku, superseded by Fly.io, with sources.
mem.diff({ since: "2026-06-15" });  // surfaces the Heroku -> Fly.io revision.

No bag-of-strings memory can answer the as_of question, because it overwrote Heroku the moment it learned Fly.io.

Correctness

The property suite is the heart of the project: for randomized sequences of remember/revise/forget, recall({asOf: T}) must equal the belief set produced by a naive, SQL-free replay of the event log, probed at every event timestamp ±1ms. 10,000 cases run on every push to main.

Benchmarked at 100k facts (10% revision chains, 2% retractions) on a developer laptop (Apple Silicon): overall recall p95 ~1.3ms against a 10ms budget, across four query shapes (two-term keyword, keyword + subject, subject-only, and as_of + keyword). pnpm bench seeds the database and asserts the budget, so the number is reproducible rather than quoted.

One deliberate divergence from the original prototype: retraction stores a timestamp (retracted_at), not a flag, so as_of queries before the retraction still see history, which is what the prototype's docs promised but its SQL didn't deliver.

Development

pnpm install
pnpm test            # unit + behavior suites (property tests at 200 runs)
pnpm test:property   # 10k randomized property cases
pnpm bench           # seed 100k facts, assert recall p95 < 10ms

Schema migrations are forward-only, driven by PRAGMA user_version. Rows are never deleted (forget tombstones), so facts.id doubles as the insert sequence. All timestamps are canonical fixed-width UTC ISO 8601, making lexicographic comparison chronological.

Optional: local usage log

For debugging or measuring your own usage, set MEMHARNESS_DEBUG=1 and the server appends an op-name and timestamp line (never fact content) to a usage.log next to the database. It is off by default, fully local, and never networked.

License

Apache-2.0