> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sovseal.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Highlights

> Major product launches, headline features, and core milestones for sovseal.

<div style={{ paddingLeft: '2.5cm', paddingRight: '2.5cm' }}>
  Major product launches, capability updates, and security proofs for **sovseal** — one private memory across every AI you use.

  ***

  ### 2026-07-29 — 70% Extension Footprint Reduction & Opt-In Fact Extractor (v0.4.1 / v1.190.0)

  Unbundled the optional 283 MB fact-extraction model from the Chrome extension package (`@sovseal/extension`), shrinking the packed extension artifact from **344.1 MiB to 100.3 MiB (−70.8%)**.

  * **Zero-Network Default Memory**: Core store and recall execute 100% offline on-device with zero network calls via the bundled ONNX embedder (`intfloat/multilingual-e5-small`).
  * **Opt-In WebGPU Extractor Download**: Local fact distillation (`LFM2.5-350M` @ 283 MB or `Qwen2.5-1.5B` @ 1.2 GB) downloads lazily only on user request, verified against SHA-256 digests over Hugging Face CORS with zero host permissions.

  ***

  ### 2026-07-28 — Real-Time Memory Inspection & Zero-Passphrase Unlock (v5.54.0 / v1.191.0)

  Overhauled the dashboard (`app.sovseal.com`) into 5 benefit-oriented core routes (`/home`, `/plan`, `/proof`, `/devices`, `/settings`) with zero-knowledge local inspection capabilities.

  * **Zero-Passphrase Local Companion Unlock**: The dashboard Memories page talks to the locally-installed Chrome extension over an origin-scoped bridge (`app.sovseal.com`) to decrypt memories client-side without entering a passphrase.
  * **Interactive Public Sandbox (`/playground`)**: Unauthenticated live demonstration executing real Web Crypto AES-256-GCM encryption/decryption in browser memory without sending keys or unencrypted data to any server.
  * **Falsifiable Security Proofs (`/proof`)**: Interactive Packet-Capture Guarantee panel and SHA-256 tamper-evident audit ledger verification.

  ***

  ### 2026-07-02 — OS Keychain Key Custody & PII Redaction Middleware (v0.3.5 / v0.3.6)

  Migrated master encryption keys from local plaintext config files into native **OS Keychain** storage (`macOS Keychain`, `Windows Credential Manager`, `Linux libsecret`).

  * **HKDF Cryptographic Domain Separation**: Derives subkeys `k_rest = HKDF(master, "sovseal/at-rest/v1")` and `k_sync = HKDF(master, "sovseal/sync/v1")` transiently in memory so at-rest storage and sync payloads are cryptographically isolated.
  * **Automated Client-Side PII Redaction**: Pre-vectorization masking for SSNs, Luhn-validated credit card numbers, and provider API keys before storage or embedding derivation.
  * **Vector Retention TTL**: LanceDB epoch-ms timestamping with 24-hour local sweeps and 7-day server grace period purges to satisfy GDPR erasure mandates.

  ***

  ### 2026-05-31 — Real-Time Memory Observability & Dashboards (v5.6.0)

  Launched the initial SaaS dashboard (`apps/dashboard`) for monitoring agent memory volume, vector recall operational metrics, and zero-knowledge synchronization state.

  ***

  ### 2026-05-12 — Zero-Knowledge Local MCP Memory Server (v0.3.0 / v5.0.0)

  Officially launched `@sovseal/mcp-server` to npm, providing an unkillable, zero-knowledge memory node for local AI clients (Claude Desktop, Cursor, etc.).

  * **Frictionless 0-Config CLI Setup**: `npx -y @sovseal/mcp-server` connects AI assistants immediately without cloud accounts or API keys for local operation.
  * **Client-Side AES-256-GCM Encryption**: All memory payloads are encrypted on your device prior to sync. Plaintext never leaves your machine.
  * **Falsifiable Security Guarantee**: Verifiable by packet inspection (Wireshark / mitmproxy). Cloud endpoints receive ciphertext only.
</div>