Safety And Portability

The runtime enforces a fixed safety layer that candidates cannot alter. Derived memories must cite their sources. Retracted, expired, or out-of-scope evidence is filtered before serving. Evaluation hooks run sandboxed with bounded compute and no network access. The pip serving worker does not provide that same kernel sandbox: trust the adopted modules or use an external isolation boundary. Fabricated or malformed references fail closed.

Canonical neural replay uses the release's Linux amd64 CPython 3.10 numeric-runtime bundle, verified by hash. ARM CPython 3.10 is qualified for serving, without a claim of byte-identical neural replay. Same-version replacement dependencies are not necessarily the same executable bytes.