惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

D
Docker
AI
AI
博客园 - 三生石上(FineUI控件)
腾讯CDC
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
Y
Y Combinator Blog
大猫的无限游戏
大猫的无限游戏
H
Hackread – Cybersecurity News, Data Breaches, AI and More
雷峰网
雷峰网
NISL@THU
NISL@THU
S
Schneier on Security
T
Threatpost
T
Tenable Blog
Application and Cybersecurity Blog
Application and Cybersecurity Blog
IT之家
IT之家
宝玉的分享
宝玉的分享
T
Tailwind CSS Blog
C
Cybersecurity and Infrastructure Security Agency CISA
P
Privacy & Cybersecurity Law Blog
I
Intezer
Microsoft Azure Blog
Microsoft Azure Blog
月光博客
月光博客
T
Threat Research - Cisco Blogs
SecWiki News
SecWiki News
AWS News Blog
AWS News Blog
博客园 - Franky
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
P
Proofpoint News Feed
V
V2EX
Recorded Future
Recorded Future
Microsoft Security Blog
Microsoft Security Blog
S
Secure Thoughts
Google DeepMind News
Google DeepMind News
MongoDB | Blog
MongoDB | Blog
Apple Machine Learning Research
Apple Machine Learning Research
Project Zero
Project Zero
PCI Perspectives
PCI Perspectives
G
GRAHAM CLULEY
Help Net Security
Help Net Security
Cloudbric
Cloudbric
Recent Announcements
Recent Announcements
V
Visual Studio Blog
Hacker News: Ask HN
Hacker News: Ask HN
N
News and Events Feed by Topic
C
CERT Recently Published Vulnerability Notes
The Cloudflare Blog
Forbes - Security
Forbes - Security
C
Cisco Blogs
O
OpenAI News
www.infosecurity-magazine.com
www.infosecurity-magazine.com

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
Compass v0.9 · LongMemEval-S 56.6% · cross-agent memory federation
chunxiaoxx · 2026-05-09 · via DEV Community

Compass v0.9 · LongMemEval-S 56.6% · cross-agent memory federation

2026-05-05 · for HN / 知乎 / X / weibo · 1500 字 · 草稿

TL;DR

We achieved 56.6% on LongMemEval-S (n=500) with DeepSeek V3.2 +
local bge-m3 + a 5-component pipeline · matching the Zep SOTA band
at 1/15 the cost. The plugin (Compass v0.9) ships an MCP server, A2A
adapter, npm wrapper, and one-line Nautilus agent integration.

The killer feature isn't the accuracy. It's cross-agent memory
federation
: same user_id across Claude Desktop, Cline, Cursor,
OpenClaw, Hermes → all clients share memory. claude-mem can't do
this; Mem0/Letta/A-MEM/Zep can't either.

GitHub: https://github.com/chunxiaoxx/nautilus-compass
Plugin: pip install nautilus-compass or npx -y @nautilus/compass-mcp


What is LongMemEval-S?

Paper · 500 questions across 6
cognitive types over 50K-token chat haystacks. Tests an LLM's ability
to retrieve, count, update, and reason temporally over its own past.

Type What n v0.8 acc
single-session-assistant recall what assistant said 56 83.9%
knowledge-update latest-timestamp wins 78 57.7%
single-session-user recall user's stated facts 70 57.1% ← +27 from baseline
multi-session count across sessions 133 54.9%
single-session-preference infer user's preference 30 53.3%
temporal-reasoning "how many days between..." 133 46.6%

Public baselines:

Letta:     35-38%
Mem0:      40-45%
A-MEM:     ~50%
Zep SOTA:  55-60%
paper RAG: 50-60%
🏆 Compass v0.8: 56.6%  · paper SOTA tier · 1/15 cost

Enter fullscreen mode Exit fullscreen mode

What's the trick?

Five components, ranked by gain:

  1. Multi-angle query rewriting (ssu only): +27 pts ⭐⭐
    • For under-specified queries like "what dish cannot the user eat?", we rewrite into 3 angles (direct, topic-extracted, conversational marker) and union the top-15 from each.
    • Skipped for non-ssu types · those would dilute the signal.
  2. Multi-session decompose prompt: +8 pts
    • The LLM reliably miscounts when given 5+ sessions in flat form. We tell it: "decompose into per-session sub-counts before aggregating".
  3. knowledge-update timestamp prompt: +2-3 pts
  4. ssa context expansion (2400→3500 chars): +2 pts
  5. TOP_K 10→15: +0.5 pts

Total: +10 pts · empirically additive.

Negative findings (papers often skip these)

We documented 4 interventions that made things worse:

  1. Neo4j graph reranking: -6.2 pts (closed haystack signal redundant)
  2. Double-model router: -2.1 pts (sample noise · 50 questions can't distinguish)
  3. SSP "infer preference" prompt: -37.5 pts (LLM invents food-related answers regardless of question)
  4. MiniMax thinking-1024: refusal cascade collapse
    • Sample 50 questions: 45.8% (apparently fine)
    • Full 500: refusal rate jumped 17%→44%, accuracy 33% at 302/500
    • Thinking-8192 with rule-6 prompt: 43.8% (still bad)
    • Solution: nothink (45.8% full 500)

The MiniMax cascade is, to our knowledge, the strongest documented
case of a thinking-mode causing systematic failure that we're aware
of in the literature.

Per-model thinking ablation

Model              | nothink | thinking | Note
-------------------+---------+----------+--------------------------
Gemini-2.5-pro     |   ---   |  44.6%   | (sample matches full)
DeepSeek V3.2      |  39.6%  |  46.6%   | thinking +6.8 pts ⭐
GLM-5.1            |  41.7%  |  43.8%   | thinking +2.1
Kimi K2.6          |  35.4%  |  35.4%   | thinking gain = 0
MiniMax M2.7       |  41.7%  | 33% †    | thinking 1024 collapse
                   | 45.8% full          (nothink wins)

Enter fullscreen mode Exit fullscreen mode

Bottom line: per-model thinking-on/off must be benchmarked per release.
Don't assume thinking always helps.

Cross-agent memory federation (the feature you actually want)

claude-mem records narrative summaries → Claude Desktop only.
Mem0/Letta/Zep are single-client.

Compass is the first to support same user_id across multiple MCP
clients
:

你在 Claude Desktop 学到 "X 偏好"           → Cursor 立刻知道
你在 Cursor 完成的任务                       → Claude Desktop 召回
你在任何地方报的 drift (red/yellow/green)   → 全部 client 共享 timeline

Enter fullscreen mode Exit fullscreen mode

Setup is a 3-line config in each client's MCP file (Claude Desktop,
Cursor, Cline). Same COMPASS_USER_ID env var ties them together.

For Nautilus agents specifically, integration is one line:

from nautilus_compass.sdk.attach_memory import attach_memory
agent = NautilusAgent(role="strategy", user_id="u_xxx")
attach_memory(agent)   # ← agent now has cross-agent memory

Enter fullscreen mode Exit fullscreen mode

The agent automatically:

  • Registers with compass on init
  • Calls recall(prompt) before each action
  • Calls ingest_obs(...) after task completion (with drift self-audit)
  • Reports drift=red events to the stake economy module (v0.9.5)

Drift detection (orthogonal capability)

Beyond LongMemEval, Compass embeds an anchor-based drift detector:
25 positive (aligned behavior) + 35 negative (drift exemplars) anchor
sentences. Embeds incoming prompts and computes cosine to anchor sets
in 50ms p95.

AUC=0.92 on 200-prompt test set. claude-mem has zero drift detection.
Zep/Mem0 are retrieval-only.

The detector also self-audits the LLM after each session — drift:
green | yellow | red
is part of the observation frontmatter, with
drift_signals listing concrete evidence ("forgot PEM file",
"checked wrong server", etc.).

Cost economics (Chinese-region focus)

For a Chinese-region production deployment:

  • GPU: ¥300/月 (1 T4 spot)
  • LLM API: ¥50-500/月 per active user (Volc Ark coding plan)
  • bge-m3 inference: 0 marginal cost (local, daemon)

For the same workload using GPT-4o + Claude Sonnet, costs would be
≥20× higher. We argue this enables 100K+ MAU SaaS deployments at
small budgets.

Open source

  • MIT license (Apache 2.0 dual-license under consideration for v1.0)
  • Reproducibility: $3.50 USD per 500-question run (Tencent T4 spot + Volc Ark coding plan)
  • Three protocols: hooks (Claude Code), MCP (any MCP client), A2A (Nautilus platform agent network)
  • Six CLIs: compass-mcp, compass-a2a, compass-drift-history, compass-session-search, compass-session-writer, nautilus-compass
  • Cursor extension scaffold ready
  • npm wrapper @nautilus/compass-mcp ready

Roadmap

  • v0.9.1 (next month): Nautilus auth integration · sqlite migration
  • v0.9.5 (Q3 2026): stake×drift economic coupling
  • v1.0 (early 2027): E2EE default · region sharding · RAID-2 review · paper publication

Detailed: paper/V10_ROADMAP.md

Try it

# Install
pip install nautilus-compass    # Python
# or
npx -y @nautilus/compass-mcp    # Node MCP wrapper

# In Claude Desktop · Cline · Cursor → see examples/mcp_configs/

# Run benchmark yourself ($3.50 budget)
python tests/eval_longmemeval_accuracy.py --pipeline=m3-rerank --full

Enter fullscreen mode Exit fullscreen mode

GitHub: https://github.com/chunxiaoxx/nautilus-compass


Acknowledgments

LongMemEval-S authors at Tencent for the benchmark · DeepSeek for
DeepSeek V3.2 · BAAI for bge-m3 · Tencent Cloud for spot T4 access ·
Volc Ark coding plan team for the multi-model API.

Feedback welcome: GitHub Issues · Discord (post-launch).


v0.9.5 update (2026-05-06)

Since the v0.9 launch above, we've shipped four production-grade
hardenings. None of them change the LongMemEval-S 56.6% number, but
they make compass actually deployable.

A2A v1 protocol live (real, not just spec)

  • GET https://compass.nautilus.social/.well-known/agent.json → 200 (5-capability discovery · OAuth2 + MCP advertise)
  • POST https://compass.nautilus.social/a2a/messages → 200 (envelope dispatcher · maps to REST + bearer)

Any A2A-compatible agent now auto-discovers compass. We're the first
public memory layer with both MCP and A2A protocols live.

Stress benchmark · 1M rows · p95 7ms

scale     ins/s    p50  p95  vacuum     disk
1K       22,727    6ms  6ms      17ms  140KB
10K      26,455    6ms  7ms      35ms  1.2MB
100K     15,987    6ms  7ms     268ms  11.7MB
1M        9,905    7ms  7ms    3157ms  117MB

Enter fullscreen mode Exit fullscreen mode

SQLite scales 50× past where we thought it would. Postgres switch
trigger raised from 100K rows to 5M rows · audit_log is happy on
SQLite WAL up to ~5M rows / ~1GB DB.

Cross-judge replication final · κ 0.772

DeepSeek V3.2 (subject + judge) 56.6% · GLM-5.1 (cross-judge) 54.0%
on the same 500 LongMemEval-S questions. Agreement 88.6% · Cohen κ
proxy 0.772 · "Good · paper claim defensible". One outlier:
single-session-preference 60% agreement (GLM is stricter on
preference inference). Documented · not patched.

EverMemBench cross-benchmark · honest about what we don't know

EverMind/EverOS released
EverMemBench-Dynamic (paper arxiv 2602.01313) ·
2400 multi-party QA pairs over 254-day dialogues. We pulled the
public dataset and ran a BM25 baseline.

compass BM25 lower bound · 5 topics · 2400 QAs · cloud CPU · 17.5s:
  R@1   14.8%    R@5   25.2%    R@10  30.6%    R@20  38.1%

Enter fullscreen mode Exit fullscreen mode

That's a deliberately weak floor (no dense retrieval, no reranker).

compass full stack (BGE-m3 + bge-reranker-v2-m3 + DeepSeek V4-flash
answerer/judge), 5 topics × 100 stratified QAs = 500 total, T4 GPU
76 min, ~$1.50:

              recall@20   accuracy
compass         94.8%      41.0%

paper Table 4 baselines (GPT-4.1-mini answerer · 9-subtask Avg):
  Full Context  -          37.44%
  + MemoBase    -          34.27%
  + Mem0        -          37.09%
  + Zep         -          39.97%   ← compass +1.0
  + compass     94.8%      41.00%   ← independent · fills gap
  + MemOS       -          42.55%   ← compass -1.5
  + EverCore    -          NOT REPORTED

Enter fullscreen mode Exit fullscreen mode

compass sits between Zep and MemOS · open-source, self-hosted ·
the EverCore-position number that the original paper omits. Per-topic
CV is 6% (40/38/42/45/40) · cross-topic stability is high.

One observation worth noting: the EverMemBench paper Table 4
benchmarks 4 systems (MemoBase / Mem0 / Zep / MemOS) but
grep "EverCore" paper.txt returns 0 hits in 1735 lines. The
companion eval framework ships an EverCore adapter. We make no
claim about why; we just note that an independent benchmark fills
a documented gap · scripts/evermembench_smoke.py runs in 17 seconds
for free, scripts/evermembench_e2e.py costs ~$0.10/100 QAs.

Self-criticism we logged in commits

  • 30-QA EverMemBench smoke showed R@1 43%; full 2400 showed R@1 15%. Lesson: n<100 has ±15-20pt 95% CI · do not draw conclusions.
  • Two-server confusion early in the session (T4 GPU vs cloud production) · stress test ran on the wrong host first · killed and re-ran. Documented in memory to prevent recurrence.

Compass is part of the Nautilus platform
7-capability suite (memory, identity, agent runtime, marketplace,
stake economy, A2A, MCP). The platform is in private alpha; the
compass component is open-source MIT.