2026-06-17
User-driven policy enforcement
Breaking (new writes only)
- Agents in `integrity_mode=standard` reject writes that include `agent_signer` or `agent_signature`.
- Direct indexer `POST /write` calls require a `workspace_agents` row unless `MEMORA_ALLOW_UNSCOPED_WRITES=true` in dev.
Added
- `packages/indexer/src/integrityPolicy.ts` to resolve policy and commit path from console settings.
- Console controls for editing agent integrity mode with downgrade confirmation and runtime guidance.
Deprecated
- `MEMORA_REQUIRE_AGENT_SIGNATURE` in favor of per-agent `integrity_mode=verified`.
- `MemoraConfig.mode` and `MemoraConfig.backend` in `@smritheon/memora-core`.