Safety And Portability

The runtime enforces a fixed safety layer that candidates cannot alter. Derived memories must cite their sources. Retracted, expired, or out-of-scope evidence is filtered before serving. Hooks run sandboxed with bounded compute and no network access. Fabricated or malformed references fail closed.

Portability is part of the contract: an accepted release must run identically across the supported operating systems and CPU architectures, so the same canonical memory behavior works everywhere.