Changelog

2026-08-14

Added

• Signed purge receipts — Every /v2/purge returns an HMAC-SHA256 receipt (purge-receipt+v1) persisted with the purge record. The record stores the key id, so receipts survive key rotation.
• Write-side provenance transport — Role spans flow from gateway projection through extraction, with user/assistant/mixed stamping and reserved-key overwrite protection.
• Vector-index rebuild tool — bulk_reindex rebuilds the derived index from the authoritative store at copy speed through the production write path.

Fixed

• Agentic self-pollution echo — Probe and scaffold text no longer round-trip into memory on the gateway path.
• Cross-role fragment attribution — Memory fragments spanning a role boundary resolve to mixed instead of the start offset's role.
• Idempotent vector upsert — Re-extraction heals through verified overwrite instead of failing terminally.

Changed

• Product naming normalized to SPM (StellarPath Memory); the former product suffix remains a sub-version codename.
• Documentation site launched; the console and landing page moved to the English-only cold monochrome design system.

2026-07-29 — 0.1.0

Initial pilot build: subscription plans, distributed rate limiting (fail-closed), evidence replay protection, OTel tracing, structured logging, OpenAPI exports, a public documentation skeleton, an incident-response runbook, and a Python SDK skeleton.