@remnic/core 9.69.61 → 9.69.63

package/dist/security/audit-memory.d.ts

@@ -1,5 +1,6 @@
 import type { MemoryFile, MemoryFrontmatter } from "../types.js";
 import type { InjectionScreenProfile } from "./injection-screen.js";
+import { type SecurityConfigProjection } from "../capabilities.js";
 export type AuditMemoryFindingCategory = "injection-signature" | "write-burst" | "authority-escalation";
 export interface AuditMemoryFinding {
     memoryId: string;
@@ -46,6 +47,15 @@ export interface AuditMemoryReport {
         }>;
     };
 }
+/**
+ * The screen profile an audit sweep must use, resolved through the shared
+ * security capability plan (#1523) rather than read off config (#3078). The
+ * sweep matches the live write path, so a memory this deployment would
+ * quarantine on write does not survive once stored; a deployment with the
+ * screen DISABLED keeps the `default` weighting, because the sweep must
+ * never be stricter than the configured write path.
+ */
+export declare function auditScreenProfile(config: SecurityConfigProjection): InjectionScreenProfile;
 export declare function auditMemoryStore(options: AuditMemoryStoreOptions): Promise<AuditMemoryReport>;
 export declare function formatAuditMemoryReport(report: AuditMemoryReport): string;
 //# sourceMappingURL=audit-memory.d.ts.map

package/dist/security/audit-memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-memory.d.ts","sourceRoot":"","sources":["../../src/security/audit-memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAIpE,MAAM,MAAM,0BAA0B,GAClC,qBAAqB,GACrB,aAAa,GACb,sBAAsB,CAAC;AAE3B,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,0BAA0B,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,eAAe,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACzC,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAClD,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC/D,iCAAiC,CAC/B,QAAQ,EAAE,UAAU,EACpB,KAAK,EAAE,OAAO,CAAC,iBAAiB,CAAC,EACjC,SAAS,CAAC,EAAE;QACV,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,EAAE,CAAC,EAAE,IAAI,CAAC;KACX,GACA,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mFAAmF;IACnF,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,kBAAkB,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,iBAAiB,EAAE,MAAM,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,KAAK,CAAC;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAChE,CAAC;CACH;AAqJD,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAwFnG;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAuBzE"}
+{"version":3,"file":"audit-memory.d.ts","sourceRoot":"","sources":["../../src/security/audit-memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAA+B,KAAK,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAIhG,MAAM,MAAM,0BAA0B,GAClC,qBAAqB,GACrB,aAAa,GACb,sBAAsB,CAAC;AAE3B,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,0BAA0B,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,eAAe,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACzC,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAClD,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC/D,iCAAiC,CAC/B,QAAQ,EAAE,UAAU,EACpB,KAAK,EAAE,OAAO,CAAC,iBAAiB,CAAC,EACjC,SAAS,CAAC,EAAE;QACV,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,EAAE,CAAC,EAAE,IAAI,CAAC;KACX,GACA,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mFAAmF;IACnF,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,kBAAkB,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,iBAAiB,EAAE,MAAM,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,KAAK,CAAC;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAChE,CAAC;CACH;AAqJD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,wBAAwB,GAAG,sBAAsB,CAG3F;AAED,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAwFnG;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAuBzE"}

package/dist/security/injection-screen.d.ts

@@ -15,6 +15,5 @@ export interface InjectionScreenResult {
 }
 export type InjectionScreenProfile = "default" | "hardened";
 export declare const INJECTION_SCREEN_THRESHOLD = 4;
-/** Screen a candidate fact without model calls, I/O, or mutable state. */
-export declare function screenCandidateFact(content: string, profile?: InjectionScreenProfile): InjectionScreenResult;
+export declare function screenCandidateFact(rawContent: string, profile?: InjectionScreenProfile): InjectionScreenResult;
 //# sourceMappingURL=injection-screen.d.ts.map

package/dist/security/injection-screen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"injection-screen.d.ts","sourceRoot":"","sources":["../../src/security/injection-screen.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,UAAU,CAAC;AAwC5D,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAyJ5C,0EAA0E;AAC1E,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,sBAAkC,GAAG,qBAAqB,CAkBvH"}
+{"version":3,"file":"injection-screen.d.ts","sourceRoot":"","sources":["../../src/security/injection-screen.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,UAAU,CAAC;AAwC5D,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAud5C,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,sBAAkC,GAC1C,qBAAqB,CA4BvB"}

package/dist/summarizer.js

@@ -1,10 +1,10 @@
 import {
   HourlySummarizer,
   summarizeHourlyStatus
-} from "./chunk-XOLVM3AT.js";
+} from "./chunk-5WXJE5TV.js";
 import "./chunk-6DNMUYEE.js";
 import "./chunk-S4DDLTPX.js";
-import "./chunk-WLZYGLJ4.js";
+import "./chunk-5MA7ZLPD.js";
 import "./chunk-62JTOLEX.js";
 import "./chunk-QM2SPLKQ.js";
 import "./chunk-JUXOTY6J.js";

package/dist/support-passport/index.js

@@ -4,7 +4,7 @@ import {
   SUPPORT_PASSPORT_MODEL_RESULT_PATH,
   SupportPassportModelBridge,
   parseSupportPassportModelJob
-} from "../chunk-M4PHCEPU.js";
+} from "../chunk-LAEW4S43.js";
 import {
   DEFAULT_SUPPORT_PASSPORT_CONFIG,
   parseSupportPassportConfig
@@ -14,8 +14,8 @@ import {
   buildSupportPassportPublicRequestHandler,
   composeSupportPassportExternalRequestHandlers,
   normalizeSupportPassportNetworkAddress
-} from "../chunk-XN4CPSCN.js";
-import "../chunk-2C5Z7CWB.js";
+} from "../chunk-LVGVXG22.js";
+import "../chunk-24TJ77TT.js";
 import {
   SUPPORT_PASSPORT_DRAFT_MAX_CONTENT_CHARACTERS,
   SUPPORT_PASSPORT_DRAFT_MAX_MEMORIES,
@@ -56,7 +56,7 @@ import {
   notifySupportPassportCommitted,
   resolveSupportPassportModelRoutePlan,
   syncDirectoryForDurability
-} from "../chunk-WD32KTVI.js";
+} from "../chunk-VXGB766B.js";
 import "../chunk-W4F3C7N7.js";
 import "../chunk-MPC7TYTZ.js";
 import "../chunk-ZHXSOMYH.js";
@@ -69,7 +69,7 @@ import "../chunk-PJSK6OJM.js";
 import "../chunk-GNVZQ5JN.js";
 import "../chunk-YN2UN7N3.js";
 import "../chunk-ROBHL3GL.js";
-import "../chunk-XOLVM3AT.js";
+import "../chunk-5WXJE5TV.js";
 import "../chunk-6DNMUYEE.js";
 import "../chunk-P5FPO2BR.js";
 import "../chunk-6ET2VII7.js";
@@ -103,8 +103,8 @@ import "../chunk-EI6V5UXY.js";
 import "../chunk-KKNZ7PUZ.js";
 import "../chunk-AERXJCOG.js";
 import "../chunk-754XN6LX.js";
-import "../chunk-NLE6TSLG.js";
-import "../chunk-WLZYGLJ4.js";
+import "../chunk-BLVHDY2U.js";
+import "../chunk-5MA7ZLPD.js";
 import "../chunk-62JTOLEX.js";
 import "../chunk-QM2SPLKQ.js";
 import "../chunk-JUXOTY6J.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.69.61",
+  "version": "9.69.63",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -2620,6 +2620,16 @@
       "remnic-source": "./src/session-integrity.ts",
       "import": "./dist/session-integrity.js"
     },
+    "./recall-handles": {
+      "types": "./dist/recall-handles.d.ts",
+      "remnic-source": "./src/recall-handles.ts",
+      "import": "./dist/recall-handles.js"
+    },
+    "./recall-handles.js": {
+      "types": "./dist/recall-handles.d.ts",
+      "remnic-source": "./src/recall-handles.ts",
+      "import": "./dist/recall-handles.js"
+    },
     "./session-namespace-bindings": {
       "types": "./dist/session-namespace-bindings.d.ts",
       "remnic-source": "./src/session-namespace-bindings.ts",
@@ -3307,7 +3317,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.69.61"
+    "@remnic/coding-graph": "^9.69.63"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/index.ts

@@ -389,7 +389,7 @@ export {
 } from "./trust-zones.js";
 export { DEFAULT_UNTRUSTED_ORIGINS, HARDENED_UNTRUSTED_ORIGINS, classifyOrigin, isUntrustedOrigin, parseOriginClass, renderAuthorityFence, type MemoryInjectionDefenseMode, type OriginClass } from "./security/origin-authority.js";
 export { INJECTION_SCREEN_THRESHOLD, screenCandidateFact, type InjectionScreenFinding, type InjectionScreenProfile, type InjectionScreenResult } from "./security/injection-screen.js";
-export { auditMemoryStore, formatAuditMemoryReport, type AuditMemoryReport } from "./security/audit-memory.js";
+export { auditMemoryStore, auditScreenProfile, formatAuditMemoryReport, type AuditMemoryReport } from "./security/audit-memory.js";
 // Access layer (HTTP + MCP + schema validation)
 // ---------------------------------------------------------------------------
 

package/src/model-registry.test.ts

@@ -1,5 +1,5 @@
 import assert from "node:assert/strict";
-import { mkdtempSync, rmSync } from "node:fs";
+import { existsSync, mkdtempSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import test from "node:test";
@@ -36,3 +36,24 @@ test("calculateContextSizes ignores invalid or tiny override values before budge
     rmSync(dir, { recursive: true, force: true });
   }
 });
+
+test("construction never creates the registry dir; the first save does", () => {
+  const dir = mkdtempSync(join(tmpdir(), "remnic-model-registry-"));
+  const registryDir = join(dir, ".registry");
+  try {
+    const registry = new ModelRegistry(dir);
+    // Constructing a registry happens on every plugin registration, including
+    // read-only discovery passes, so it must not touch the memory dir.
+    assert.equal(existsSync(registryDir), false, "no dir before anything is cached");
+    registry.setCapabilities("local-model", {
+      maxPositionEmbeddings: 32_768,
+      contextWindow: 32_768,
+      supportsExtendedContext: false,
+      typicalOutputTokens: 2_048,
+      source: "manual",
+    });
+    assert.equal(existsSync(registryDir), true, "the first cached model creates it");
+  } finally {
+    rmSync(dir, { recursive: true, force: true });
+  }
+});

package/src/model-registry.ts

@@ -5,7 +5,7 @@
 
 import { log } from "./logger.js";
 import fs from "node:fs";
-import { join } from "node:path";
+import { dirname, join } from "node:path";
 
 export interface ModelCapabilities {
   modelId: string;
@@ -116,11 +116,7 @@ export class ModelRegistry {
   private readonly CACHE_TTL_DAYS = 7;
 
   constructor(memoryDir: string) {
-    const registryDir = join(memoryDir, ".registry");
-    if (!fs.existsSync(registryDir)) {
-      fs.mkdirSync(registryDir, { recursive: true });
-    }
-    this.registryPath = join(registryDir, "model-capabilities.json");
+    this.registryPath = join(memoryDir, ".registry", "model-capabilities.json");
     this.data = this.loadRegistry();
   }
 
@@ -140,6 +136,11 @@ export class ModelRegistry {
 
   private saveRegistry(): void {
     try {
+      // Created on first save, never at construction: building a registry
+      // happens on every plugin registration, including read-only discovery
+      // passes, and must not touch the operator's memory dir.
+      const registryDir = dirname(this.registryPath);
+      if (!fs.existsSync(registryDir)) fs.mkdirSync(registryDir, { recursive: true });
       fs.writeFileSync(this.registryPath, JSON.stringify(this.data, null, 2));
     } catch (err) {
       log.warn(`ModelRegistry: failed to save registry: ${err}`);

package/src/profiling.test.ts

@@ -1,5 +1,5 @@
 import assert from "node:assert/strict";
-import { mkdtempSync, readdirSync, rmSync } from "node:fs";
+import { existsSync, mkdtempSync, readdirSync, rmSync } from "node:fs";
 import { join } from "node:path";
 import { tmpdir } from "node:os";
 import test, { describe } from "node:test";
@@ -283,4 +283,23 @@ describe("ProfilingCollector", () => {
       cleanup(dir);
     }
   });
+
+  test("construction never creates the storage dir; the first persist does", () => {
+    const dir = tempDir();
+    const storageDir = join(dir, "profiling");
+    try {
+      const collector = new ProfilingCollector({ enabled: true, storageDir, maxTraces: 10 });
+      // Constructing a collector happens on every plugin registration, including
+      // read-only discovery passes, so it must not touch the memory dir.
+      assert.equal(existsSync(storageDir), false, "no dir before a trace is written");
+      collector.startTrace("recall", "test-session");
+      collector.startSpan("qmd-search");
+      collector.endSpan("qmd-search");
+      collector.endTrace();
+      assert.equal(existsSync(storageDir), true, "the first persisted trace creates it");
+      assert.equal(readdirSync(storageDir).length, 1);
+    } finally {
+      cleanup(dir);
+    }
+  });
 });

package/src/profiling.ts

@@ -118,13 +118,6 @@ export class ProfilingCollector {
     this.enabled = config.enabled;
     this.storageDir = config.storageDir;
     this.maxTraces = Math.max(0, config.maxTraces);
-
-    if (this.enabled) {
-      if (!existsSync(this.storageDir)) {
-        mkdirSync(this.storageDir, { recursive: true });
-        log.debug(`profiling: created storage dir ${this.storageDir}`);
-      }
-    }
   }
 
   get isEnabled(): boolean {
@@ -347,6 +340,13 @@ export class ProfilingCollector {
     const filename = `${trace.kind}-${trace.traceId}.jsonl`;
     const filepath = join(this.storageDir, filename);
     try {
+      // Created on first persist, never at construction: constructing a
+      // collector (plugin registration, a discovery pass, CLI metadata) must
+      // not touch the operator's memory dir when no trace is ever written.
+      if (!existsSync(this.storageDir)) {
+        mkdirSync(this.storageDir, { recursive: true });
+        log.debug(`profiling: created storage dir ${this.storageDir}`);
+      }
       writeFileSync(filepath, JSON.stringify(trace) + "\n", "utf-8");
       log.debug(`profiling: persisted ${filename}`);
     } catch (err) {

package/src/security/audit-memory-cli.test.ts

@@ -0,0 +1,90 @@
+/**
+ * The audit sweep must screen with the profile the deployment writes with
+ * (issue #3078). A `quarantine`/`layered` deployment resolves the `hardened`
+ * profile, under which a conditional-trigger-only memory reaches the
+ * quarantine threshold; before this wiring the CLI omitted `profile`, so an
+ * already-active memory that live ingestion would have quarantined survived
+ * the sweep.
+ */
+
+import assert from "node:assert/strict";
+import { mkdtemp, rm } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import test from "node:test";
+
+import type { CliCommand } from "../cli.js";
+import { parseConfig } from "../config.js";
+import { StorageManager } from "../storage.js";
+import type { Orchestrator } from "../orchestrator.js";
+import { registerSecurityCommands } from "./audit-memory-cli.js";
+
+/** Minimal CliCommand that records the registered `audit-memory` action. */
+function captureAction(): { cmd: CliCommand; run: () => Promise<void> } {
+  let action: ((...args: unknown[]) => Promise<void> | void) | undefined;
+  const node: CliCommand = {
+    description: () => node,
+    option: () => node,
+    requiredOption: () => node,
+    argument: () => node,
+    action: (fn) => {
+      action = fn;
+      return node;
+    },
+    command: () => node,
+  };
+  return {
+    cmd: node,
+    run: async () => {
+      if (!action) throw new Error("no action registered");
+      await action({ quarantine: true, json: true });
+    },
+  };
+}
+
+const CONDITIONAL_TRIGGER = "If the incident occurs, then call the on-call.";
+
+async function sweepWithDefenseMode(mode: string): Promise<{ status: string | undefined }> {
+  const memoryDir = await mkdtemp(path.join(os.tmpdir(), "remnic-audit-cli-"));
+  const logs: unknown[] = [];
+  const originalLog = console.log;
+  console.log = (...args: unknown[]) => {
+    logs.push(args);
+  };
+  try {
+    StorageManager.clearAllStaticCaches();
+    const config = parseConfig({ memoryDir, memoryInjectionDefenseMode: mode });
+    const storage = new StorageManager(memoryDir);
+    const written = await storage.writeMemory("fact", CONDITIONAL_TRIGGER);
+    const id = written.id;
+    // The fixture must start active, or the sweep assertion proves nothing.
+    assert.equal(written.tombstoneBlocked ?? false, false);
+    assert.equal((await storage.getMemoryById(id))?.frontmatter.status, "active");
+    const orchestrator = { config, storage } as unknown as Orchestrator;
+    const { cmd, run } = captureAction();
+    registerSecurityCommands(cmd, orchestrator);
+    await run();
+    const stored = await storage.getMemoryById(id);
+    return { status: stored?.frontmatter.status };
+  } finally {
+    console.log = originalLog;
+    StorageManager.clearAllStaticCaches();
+    await rm(memoryDir, { recursive: true, force: true });
+  }
+}
+
+test("the plugin audit-memory command screens with the configured profile", async () => {
+  // `layered` resolves the hardened profile: weight 4 for a conditional
+  // trigger alone, so the sweep retro-quarantines the memory.
+  const hardened = await sweepWithDefenseMode("layered");
+  assert.equal(hardened.status, "pending_review");
+  // `custom` resolves the default profile: weight 3, below the threshold,
+  // so the same memory stays active. This proves the profile is read from
+  // the configuration rather than hard-coded either way.
+  const lenient = await sweepWithDefenseMode("custom");
+  assert.equal(lenient.status, "active");
+  // `off`/`fencing` disable live screening, so the sweep keeps the previous
+  // `default` weighting instead of becoming stricter than the write path.
+  const screenDisabled = await sweepWithDefenseMode("off");
+  assert.equal(screenDisabled.status, "active");
+});

package/src/security/audit-memory-cli.ts

@@ -7,6 +7,7 @@
 import type { CliCommand } from "../cli.js";
 import { runAuditMemoryCliCommand } from "../cli.js";
 import type { Orchestrator } from "../orchestrator.js";
+import { auditScreenProfile } from "./audit-memory.js";
 import { formatAuditMemoryReport } from "./audit-memory.js";
 
 export function registerSecurityCommands(
@@ -32,6 +33,12 @@ export function registerSecurityCommands(
           ? options.since.trim()
           : undefined,
         quarantine: options.quarantine === true,
+        // Screen with the profile live ingestion uses, or a memory this
+        // deployment would quarantine on write stays active once stored
+        // (#3078). A deployment with the screen DISABLED keeps the previous
+        // `default` weighting: the sweep must not be stricter than the
+        // write path the operator configured.
+        profile: auditScreenProfile(orchestrator.config),
       });
       if (options.json === true) {
         console.log(JSON.stringify(report, null, 2));

package/src/security/audit-memory.ts

@@ -1,6 +1,7 @@
 import type { MemoryFile, MemoryFrontmatter } from "../types.js";
 import { screenCandidateFact } from "./injection-screen.js";
 import type { InjectionScreenProfile } from "./injection-screen.js";
+import { resolveSecurityCapabilities, type SecurityConfigProjection } from "../capabilities.js";
 import { inferMemoryStatus, isArchivedMemoryPath, toMemoryPathRel } from "../memory-lifecycle-ledger-utils.js";
 import { parseStrictCliDate } from "../training-export/date-parse.js";
 
@@ -206,6 +207,19 @@ function writeBurstStats(groups: Map<string, MemoryFile[]>): AuditMemoryReport["
   };
 }
 
+/**
+ * The screen profile an audit sweep must use, resolved through the shared
+ * security capability plan (#1523) rather than read off config (#3078). The
+ * sweep matches the live write path, so a memory this deployment would
+ * quarantine on write does not survive once stored; a deployment with the
+ * screen DISABLED keeps the `default` weighting, because the sweep must
+ * never be stricter than the configured write path.
+ */
+export function auditScreenProfile(config: SecurityConfigProjection): InjectionScreenProfile {
+  const capabilities = resolveSecurityCapabilities(config);
+  return capabilities.injectionScreen ? capabilities.injectionScreenProfile : "default";
+}
+
 export async function auditMemoryStore(options: AuditMemoryStoreOptions): Promise<AuditMemoryReport> {
   const since = parseSince(options.since);
   const storage = options.storage;