memory-os

Commit Graph

Author	SHA1	Message	Date
David Soff	a5c1344afb	security(hooks, context_enhancer): add dual-layer prompt injection sanitization (#5 ) security(hooks, context_enhancer): add dual-layer prompt injection sanitization - Layer 1 (hooks.py): aggressive sanitization at prompt boundary with 11 regex patterns + heuristic. Detects override directives, template injection, URI schemes, system prefixes, HTML/XML, control chars, zero-width Unicode, and code fences. Applied to fabric, Qdrant, sessions, and facts injection points. Complements existing _is_system_injection() (which filters ingest, not egest). - Layer 2 (context_enhancer.py): lightweight sanitization on all search result content_preview outputs (hybrid, dense, sparse, lexical, sqlite). - _test_sanitize.py: manual validation script with 24 test cases. - Replacement strategy: [REDACTED] preserves audit trail and grammatical context instead of silent removal.	2026-06-02 13:43:34 -03:00
David Soff	0d6fc33c00	fix(context_enhancer): refactor embed_query_sparse to use stdin (#4 ) fix(context_enhancer): refactor embed_query_sparse to use stdin instead of f-string interpolation - Eliminates shlex.quote() crash with apostrophes (SyntaxError in subprocess) - Eliminates user text interpolation into Python code string - Hardcodes BM25 model name (was already hardcoded module-level) - Corrects FastEmbed API usage: model.embed([query]) instead of model.embed(string)	2026-06-02 13:28:32 -03:00
ClaudioDrews	0b32ffcfc2	Initial commit: Memory OS — 6-layer memory architecture for Hermes Agent	2026-05-31 16:50:37 -03:00

Author

SHA1

Message

Date

David Soff

a5c1344afb

security(hooks, context_enhancer): add dual-layer prompt injection sanitization (#5 )

security(hooks, context_enhancer): add dual-layer prompt injection sanitization

- Layer 1 (hooks.py): aggressive sanitization at prompt boundary with
  11 regex patterns + heuristic. Detects override directives, template
  injection, URI schemes, system prefixes, HTML/XML, control chars,
  zero-width Unicode, and code fences. Applied to fabric, Qdrant,
  sessions, and facts injection points. Complements existing
  _is_system_injection() (which filters ingest, not egest).

- Layer 2 (context_enhancer.py): lightweight sanitization on all
  search result content_preview outputs (hybrid, dense, sparse,
  lexical, sqlite).

- _test_sanitize.py: manual validation script with 24 test cases.

- Replacement strategy: [REDACTED] preserves audit trail and
  grammatical context instead of silent removal.

2026-06-02 13:43:34 -03:00

David Soff

0d6fc33c00

fix(context_enhancer): refactor embed_query_sparse to use stdin (#4 )

fix(context_enhancer): refactor embed_query_sparse to use stdin instead of f-string interpolation

- Eliminates shlex.quote() crash with apostrophes (SyntaxError in subprocess)
- Eliminates user text interpolation into Python code string
- Hardcodes BM25 model name (was already hardcoded module-level)
- Corrects FastEmbed API usage: model.embed([query]) instead of model.embed(string)

2026-06-02 13:28:32 -03:00

ClaudioDrews

0b32ffcfc2

Initial commit: Memory OS — 6-layer memory architecture for Hermes Agent

2026-05-31 16:50:37 -03:00

3 Commits