release: harden trust and consistency in 0.24.0

[ccf]

Summary

Ships agentcairn 0.24.0 with a trust-boundary and consistency hardening pass across recall, ingestion, indexing, MCP, CLI, Hermes, OpenCode, plugins, and the website.

Why

Several independent paths could mutate the same vault/index without shared writer coordination; retrieval could keep serving a stale or incompatible vector index after failures; and automatically recalled/model-generated text needed a stricter untrusted-data boundary before prompt insertion, filenames, storage, or network egress.

What changed

• Adds per-vault cross-process writer locks, restricted file modes, atomic replacements, and centralized storage helpers.
• Makes index reconciliation transactional and first-read aware, with explicit freshness diagnostics and visible BM25 degradation when vector retrieval is incompatible or unavailable.
• Makes MCP remember write-through so successful writes are immediately searchable.
• Defaults automatic recall to project scope and renders recalled content as quoted, untrusted evidence across Claude Code, OpenCode, and Hermes.
• Redacts secrets at cloud/LLM egress and before model-generated titles or Markdown are written; rejects symlinks escaping the vault.
• Fixes ranking behavior for negative reranker logits and preserves fused ordering on reranker failure.
• Stops Codex and Antigravity plugins from pinning ~/agentcairn; adds file-configurable cloud embedding credentials/endpoints.
• Bumps Python package to 0.24.0 and affected Codex, Antigravity, and Hermes plugins to 0.1.1.

Verification

• Core suite: 743 passed, 5 skipped
• Security/integration review subset: 217 passed
• Release/plugin subset: 51 passed
• Benchmarks: 42 passed
• Claude plugin: 23 passed
• OpenCode adapter: 14 passed
• Website: Astro check clean; Playwright 18 passed
• Ruff and pre-commit hooks: passed
• Wheel and sdist built as 0.24.0 and inspected for the new packaged modules

Release

After merge, tag v0.24.0. The tag workflow publishes to PyPI; a GitHub Release will be created separately from the changelog notes.

---

Note

High Risk
Touches authentication-adjacent prompt injection boundaries, secret egress, concurrent vault/index mutation, and default recall scope—behavior changes are broad but heavily tested.

Overview
agentcairn 0.24.0 is a trust-boundary and consistency release across the Python core, MCP, CLI, Hermes, OpenCode, and plugin manifests.

Writer coordination and durable I/O: A new per-vault advisory lock serializes CLI sweep/reindex/ingest/link/init, MCP remember/reconcile, and Hermes capture/saves; contention exits with retry guidance (VaultBusyError). Vault and cache writes move through atomic_write_text, private 0600/0700 defaults, and preserved modes on existing user files.

Index and retrieval: reconcile runs in a DuckDB transaction so embedding/FTS failures keep the last good index. MCP lazily reconciles on first read with freshness/retrieval diagnostics; remember is write-through when an index path is set. Search degrades visibly to BM25 on model/dimension mismatch or provider failure; reranker failure keeps fused order; temporal/project boosts use log-space adjustment so negative cross-encoder scores rank correctly.

Automatic recall and prompt injection: Default auto_recall_scope is project (cross-project requires explicit all). Claude Code, OpenCode, and Hermes inject memories as quoted, provenance-tagged, untrusted evidence with an explicit trust boundary—not raw instructions.

Security egress and vault boundary: Cloud embedding payloads, LLM consolidation prompts, and model-generated titles/distillations are redacted before network or Markdown write; vault Markdown symlinks that escape the vault are rejected before index/embed. Config file gains voyage_api_key, openai_api_key, and openai_base_url; Codex/Antigravity MCP manifests no longer pin CAIRN_VAULT.

Package version 0.24.0; affected plugins 0.1.1. Changelog and README updated accordingly.

^{Reviewed by Cursor Bugbot for commit cbfb365. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	agentcairn	cbfb365	Commit Preview URL Branch Preview URL	Jul 12 2026, 05:08 AM