Labs · Changelog

Changelog

Release notes are taken from each repository’s GitHub releases and, where present, CHANGELOG.md. Dates below are converted from the GitHub timestamps (UTC) to America/New_York. This page was compiled on 14 November 2026.

Ambient Memory

Source: GitHub releases and CHANGELOG.md. Repository: JarvisOsorio/ambient-memory.

v0.3.0 — 12 November 2026, 2:35 p.m. America/New_York

Release title: ambient-memory v0.3.0. Zero-config local ambient memory for AI agents — encrypted vault plus MCP, no native C++ install.

• Breaking: removed better-sqlite3 (native C++). Storage uses Node built-in node:sqlite (Node 22+) with sql.js WASM fallback (Node 20+).
• Breaking: the daemon is the sole process that opens and seals SQLite; CLI and ambient mcp are thin IPC clients (Unix socket / Windows named pipe).
• Breaking: package bins ambient and ambient-memory for npx -y ambient-memory ….
• Added: aggressive context noise control (noisy-app denylist, focus dedupe, session summarization; context reports noise stats); honest crypto documentation; IPC protocol plus integration tests.
• Fixed: seal/unseal races from concurrent CLI/MCP database opens; zero-config install friction from node-gyp / MSVC toolchains.

A follow-up commit the same afternoon added badges, Smithery/MCP/server manifests and a topics workflow (a194c61, 12 November 2026, 2:37 p.m. America/New_York).

v0.2.1 — 12 November 2026, 10:43 a.m. America/New_York

• Multi-term search now uses FTS OR plus term-coverage boosts
• Seal-on-stop reliability; doctor honesty; Zod audit override

Earlier changelog entries (same calendar day)

CHANGELOG.md also records 0.2.0 as an engineer-grade upgrade (FTS5/BM25, MCP get/context, ingestion hardening, threat model) and 0.1.0 as the initial local MVP. Those versions are not published as separate GitHub releases besides the notes in the changelog file.

mcp-pordego

This repository has no CHANGELOG.md. Notes below are from GitHub releases and recent commits on main. Repository: JarvisOsorio/mcp-pordego.

v0.1.1 — 13 November 2026, 1:14 p.m. America/New_York

Docs and launch polish for the README, from pull request #1 by Jarvis Osorio. Compare: v0.1.0…v0.1.1. The v0.1.1 release asset is mcp-pordego.cjs.

Commits on that line include hardening scanner config exits and npx pin detection (ad036fc, 12 November 2026, 11:57 p.m. America/New_York).

v0.1.0 — 12 November 2026, 10:55 p.m. America/New_York

Scanner-first release. mcp-pordego scan audits MCP configs (Claude Desktop/Code, Cursor, VS Code) for unpinned servers, inline secrets, injection heuristics and over-broad tools. Install from the repository: pnpm install && pnpm build, then pnpm scan or node packages/cli/dist/index.js scan.

Other notable pre-release commits on 12–13 November 2026 (America/New_York) include hardening desc-cross-tool-ref against JSON escape corruption, a CI pnpm version fix, and an honest README install path. Earlier “materialize seed” commits that landed the initial tree are omitted here.

agentscrub (agent-session-scrubber)

Source: GitHub release v0.1.0 and CHANGELOG.md. Repository: JarvisOsorio/agent-session-scrubber.

v0.1.0 — 13 November 2026, 7:01 p.m. America/New_York

Release title: agentscrub v0.1.0 — local-first working scanner. Offline CLI to discover, scan, classify and redact secrets and PII in AI agent session transcripts. No cloud, no telemetry, and no network during scan, scrub or verify.

• Clap CLI: discover, scan, report, scrub, verify, retention, config
• Adapters: Claude Code, Codex, Cursor (read-only rewrite), generic JSONL, generic JSON
• At least 20 secret detectors plus initial PII (email, phone, IP, Luhn credit cards)
• Masked findings and HMAC fingerprints; terminal/JSON/Markdown reports
• Dry-run redaction by default; --confirm atomic rewrite with lock and hash recheck
• Verification and sanitized receipts
• Retention status/plan; deletion refused while retention.enabled = false
• Harden (same 0.1.0 line): detection corpora with recall/precision asserts; redaction safety tests; retention planner keeps uncertain mtimes; CI on Ubuntu/macOS/Windows with blocking cargo audit; rusqlite bumped to 0.42 for RUSTSEC-2026-0459

Later the same evening, d750d89 (13 November 2026, 7:35 p.m. America/New_York) fixed complete multi-finding JSONL/JSON redaction (pull request #2). The v0.1.0 tag itself points at 211684a.