ragleap-memory v0.1.0 release notes

ragleap-memory 0.1.0: durable, tenant-scoped long-term memory (SQLite)

First release. Persistent memory for LLM applications in one SQLite file, with the tenant scope enforced inside the SQL. Depends on ragleap-security 0.1.0. Not independently audited: docs/threat-model.md lists what is and is not defended.

Behaviour changes

None: this is the first release.

What's new

SQLiteStore: FTS5 keyword search over typed entries (episode, fact, summary) with trust labels (new entries default to untrusted).
Every call takes a ragleap-security Scope and is filtered by it inside the SQL; a missing entry and an entry outside your scope look the same.
supersede (history is kept), forget, export, erase (removes the text from the database file), sweep_expired, compact, and an optional audit log that records operations without entry text.

Verified

89 tests pass on Python 3.10 (the VPS, SQLite 3.37.2) and on Python 3.12 (the author's sandbox). The CI test job passes on Python 3.10, 3.11 and 3.12 (#922).
27 of 27 mutations are killed on Python 3.10 and 3.12 (scripts/mutation_check.py).
After erase(), a byte-level search of the database file and its journal finds no trace of the deleted text (tested on the two SQLite builds above).
A wheel built locally before tagging contains only the three modules plus metadata, installs in a clean Python 3.10 virtual environment (pulling ragleap-security 0.1.0 from PyPI), and the README example runs from it.
The wheel published on PyPI installs in a clean Python 3.10 virtual environment and imports from there (checked after publishing).
The wheel and sdist built locally before tagging have the same SHA-256 digests as the files published on PyPI (the build is reproducible here).

Not verified

Windows, network file systems, several processes writing one file, and power-loss durability.
Retrieval quality: no benchmark has been run. Multilingual precision is unmeasured (whole-word search is tested for Hindi, Tamil, Arabic and Chinese written with spaces; Chinese or Japanese text without spaces is not split into words).
Tenant isolation holds inside this library, but nothing else in the repository uses it yet, and the caller chooses the scope.
No independent security review has been done.

Provenance

Tag ragleap-memory-v0.1.0 (annotated) on merge commit e576cc12f6ceda3b08a670b1212e7876ef0d0e45. Release PR #924; code in #922.
Release workflow run 40060689857, published 2026-10-24 04:02 UTC.
The CHANGELOG inside the published files is dated 2026-10-23, the day this release was prepared, but the tag was pushed on 2026-10-24 (UTC). Published files cannot change, so the date is corrected on main with a note.
ragleap_memory-0.1.0-py3-none-any.whl sha256 c60a1e4f91e323c04ba04d7628abb7028039206d2330921a7ca00ae053a3533e
ragleap_memory-0.1.0.tar.gz sha256 0c35b216916031d2c42d458a8fd95268780c76797b800b6898657dbd560ea42c