Major product launches, capability updates, and security proofs for sovseal — one private memory across every AI you use.
2026-07-29 — 70% Extension Footprint Reduction & Opt-In Fact Extractor (v0.4.1 / v1.190.0)
Unbundled the optional 283 MB fact-extraction model from the Chrome extension package (@sovseal/extension), shrinking the packed extension artifact from 344.1 MiB to 100.3 MiB (−70.8%).- Zero-Network Default Memory: Core store and recall execute 100% offline on-device with zero network calls via the bundled ONNX embedder (
intfloat/multilingual-e5-small). - Opt-In WebGPU Extractor Download: Local fact distillation (
LFM2.5-350M@ 283 MB orQwen2.5-1.5B@ 1.2 GB) downloads lazily only on user request, verified against SHA-256 digests over Hugging Face CORS with zero host permissions.
2026-07-28 — Real-Time Memory Inspection & Zero-Passphrase Unlock (v5.54.0 / v1.191.0)
Overhauled the dashboard (app.sovseal.com) into 5 benefit-oriented core routes (/home, /plan, /proof, /devices, /settings) with zero-knowledge local inspection capabilities.- Zero-Passphrase Local Companion Unlock: The dashboard Memories page talks to the locally-installed Chrome extension over an origin-scoped bridge (
app.sovseal.com) to decrypt memories client-side without entering a passphrase. - Interactive Public Sandbox (
/playground): Unauthenticated live demonstration executing real Web Crypto AES-256-GCM encryption/decryption in browser memory without sending keys or unencrypted data to any server. - Falsifiable Security Proofs (
/proof): Interactive Packet-Capture Guarantee panel and SHA-256 tamper-evident audit ledger verification.
2026-07-02 — OS Keychain Key Custody & PII Redaction Middleware (v0.3.5 / v0.3.6)
Migrated master encryption keys from local plaintext config files into native OS Keychain storage (macOS Keychain, Windows Credential Manager, Linux libsecret).- HKDF Cryptographic Domain Separation: Derives subkeys
k_rest = HKDF(master, "sovseal/at-rest/v1")andk_sync = HKDF(master, "sovseal/sync/v1")transiently in memory so at-rest storage and sync payloads are cryptographically isolated. - Automated Client-Side PII Redaction: Pre-vectorization masking for SSNs, Luhn-validated credit card numbers, and provider API keys before storage or embedding derivation.
- Vector Retention TTL: LanceDB epoch-ms timestamping with 24-hour local sweeps and 7-day server grace period purges to satisfy GDPR erasure mandates.
2026-05-31 — Real-Time Memory Observability & Dashboards (v5.6.0)
Launched the initial SaaS dashboard (apps/dashboard) for monitoring agent memory volume, vector recall operational metrics, and zero-knowledge synchronization state.2026-05-12 — Zero-Knowledge Local MCP Memory Server (v0.3.0 / v5.0.0)
Officially launched@sovseal/mcp-server to npm, providing an unkillable, zero-knowledge memory node for local AI clients (Claude Desktop, Cursor, etc.).- Frictionless 0-Config CLI Setup:
npx -y @sovseal/mcp-serverconnects AI assistants immediately without cloud accounts or API keys for local operation. - Client-Side AES-256-GCM Encryption: All memory payloads are encrypted on your device prior to sync. Plaintext never leaves your machine.
- Falsifiable Security Guarantee: Verifiable by packet inspection (Wireshark / mitmproxy). Cloud endpoints receive ciphertext only.