audrey 1.1.0 → 1.1.2

package/docs/paper/output/arxiv-compile-report.json

@@ -1,13 +1,13 @@
 {
   "schemaVersion": "1.0.0",
   "suite": "Audrey arXiv compile check",
-  "generatedAt": "2026-07-10T15:00:49.374Z",
+  "generatedAt": "2026-07-13T14:48:57.090Z",
   "source": {
     "sourceDir": "docs/paper/output/arxiv",
     "manifest": "docs/paper/output/arxiv/arxiv-manifest.json",
-    "manifestSha256": "9df7fee92964064551d7eb23098800f909f7ae8dc770be2ddcc29ff3cb33723a",
+    "manifestSha256": "de555f986f650735f8b4184eb93504b20d94dbd1e8510d839311fbf7e7d69429",
     "mainTex": "docs/paper/output/arxiv/main.tex",
-    "mainTexSha256": "1dbe78fa0648e70bd02db6ff29352d8af859af25e27eb28e39a3cd78fa0965f9",
+    "mainTexSha256": "d9d0cf25cad4e59d6234643eb875bd5d74b4d45acd106e9bc01c7454e7240622",
     "referencesBib": "docs/paper/output/arxiv/references.bib",
     "referencesBibSha256": "c0bfcaf7bfe37d6933c812e46352be8a95397eaa430a0f5bc94037600a53f654"
   },

package/docs/paper/output/submission-bundle/README.md

@@ -34,10 +34,12 @@ The model does not have to remember that a memory tool exists. That is the point
 Install Audrey once, review the hooks once, and then use Codex or Claude Code normally.
 
 ```bash
-npm install -g audrey
+npm install -g audrey --allow-scripts=better-sqlite3,onnxruntime-node,sharp,protobufjs
 audrey install --host auto
 ```
 
+The explicit install-script list is for npm 12's safer dependency policy. It permits only the four packages Audrey needs for SQLite, local inference, and their generated runtime files. With npm 11 or earlier, the shorter `npm install -g audrey` is equivalent.
+
 `auto` configures whichever supported CLIs are installed. You can choose one explicitly:
 
 ```bash
@@ -76,7 +78,7 @@ This is more useful than “the vector search found a vaguely similar error.”
 Try the complete loop without an API key or network call:
 
 ```bash
-npx audrey demo --scenario repeated-failure
+audrey demo --scenario repeated-failure
 ```
 
 ## What Audrey remembers
@@ -127,12 +129,10 @@ Vector candidates are partitioned by agent before nearest-neighbor ranking, so o
 ## See it before installing anything
 
 ```bash
-npx audrey doctor
-npx audrey demo
-npx audrey install --host auto --dry-run
+npm exec --yes --package=audrey --allow-scripts=better-sqlite3,onnxruntime-node,sharp,protobufjs -- audrey demo --scenario repeated-failure
 ```
 
-The dry run prints the MCP and lifecycle-hook configuration for both hosts without changing files.
+That command runs from the npm cache, exercises the full SQLite-backed Guard loop, and leaves host configuration unchanged.
 
 <div align="center">
   <img src="docs/assets/audrey-feature-grid.jpg" alt="Audrey memory continuity, recall, evidence, local storage, and memory-before-action" width="760">
@@ -165,6 +165,13 @@ npm install audrey
 pip install audrey-memory
 ```
 
+For a project install with npm 12, approve Audrey's reviewed dependency scripts in the project root and rebuild once if npm reported that it blocked them:
+
+```bash
+npm install-scripts approve better-sqlite3 onnxruntime-node sharp protobufjs
+npm rebuild
+```
+
 For Autopilot, prefer a global or otherwise stable installation. Hook and MCP configuration pins the actual Node executable and Audrey entrypoint; an ephemeral `npx` cache is not a durable production runtime.
 
 ### Host configuration
@@ -340,6 +347,8 @@ The server also sends host instructions explaining the Guard receipt loop when l
 | `AUDREY_DEVICE` | `gpu` | Local embedding device; falls back to CPU |
 | `AUDREY_CONTEXT_BUDGET_CHARS` | `4000` | Maximum default capsule size |
 | `AUDREY_AUTOPILOT_SCOPE` | `agent` | `agent` or explicit cross-agent `shared` recall for hooks |
+| `AUDREY_PACKET_FORMAT` | `compact` | Injected packet style: `compact` line format or `verbose` key=value |
+| `AUDREY_PACKET_DELTA` | `1` | Inject each memory once per session; `0` resends full packets every prompt |
 | `AUDREY_HOOK_FAIL_CLOSED` | `0` | Deny guarded actions when Audrey itself fails |
 | `AUDREY_API_KEY` | unset | Bearer token for REST access |
 | `AUDREY_HOST` | `127.0.0.1` | REST bind address |
@@ -381,7 +390,7 @@ npm run pack:check
 GuardBench currently contains ten local, deterministic pre-action scenarios covering repeated failures, procedures, scope changes, recovery, redaction, conflicting instructions, and noisy stores. The checked-in v1 methodology uses a mock 64-dimensional embedding provider and exists to catch regressions. A perfect local pass is not a claim about real-provider latency or production false-positive rates.
 
 <!-- guardbench-summary:start -->
-Latest local result in this checkout: 10/10 scenarios passed, 100% prevention rate, 0% false-block rate, 0 raw secret leaks, 0 published artifact leaks, and 3.501ms / 20.658ms p50/p95 Guard latency under the mock-provider methodology.
+Latest local result in this checkout: 10/10 scenarios passed, 100% prevention rate, 0% false-block rate, 0 raw secret leaks, 0 published artifact leaks, and 4.253ms / 21.196ms p50/p95 Guard latency under the mock-provider methodology.
 <!-- guardbench-summary:end -->
 
 `benchmarks/perf-snapshot.js` measures encode and hybrid-recall p50/p95/p99 at configurable corpus sizes with machine and provider provenance. Run it on the hardware and embedding provider you plan to operate; hosted-provider latency is dominated by its network round trip.

package/docs/paper/output/submission-bundle/benchmarks/output/adapter-self-test/guardbench-adapter-self-test.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "1.0.0",
   "suite": "GuardBench adapter self-test",
-  "generatedAt": "2026-07-10T15:00:46.455Z",
+  "generatedAt": "2026-07-13T14:48:54.144Z",
   "ok": true,
   "adapter": {
     "name": "Example Allow Adapter",
@@ -27,9 +27,9 @@
     "evidenceRecall": 0.1,
     "redactionLeaks": 0,
     "latency": {
-      "p50Ms": 0.01,
-      "p95Ms": 0.042,
-      "maxMs": 0.042
+      "p50Ms": 0.011,
+      "p95Ms": 0.041,
+      "maxMs": 0.041
     }
   },
   "contract": {

package/docs/paper/output/submission-bundle/benchmarks/output/external/guardbench-external-dry-run.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "1.0.0",
   "suite": "GuardBench external adapter dry-run matrix",
-  "generatedAt": "2026-07-10T15:00:47.009Z",
+  "generatedAt": "2026-07-13T14:48:54.712Z",
   "ok": true,
   "registry": "benchmarks/adapters/registry.json",
   "outRoot": "benchmarks/output/external",

package/docs/paper/output/submission-bundle/benchmarks/output/external/guardbench-external-evidence.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "1.0.0",
   "suite": "GuardBench external evidence verification",
-  "generatedAt": "2026-07-10T15:00:47.285Z",
+  "generatedAt": "2026-07-13T14:48:54.992Z",
   "ok": true,
   "allowPending": true,
   "registry": "benchmarks/adapters/registry.json",

package/docs/paper/output/submission-bundle/benchmarks/output/guardbench-conformance-card.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "1.0.0",
   "suite": "GuardBench conformance card",
-  "generatedAt": "2026-07-10T15:00:42.135Z",
+  "generatedAt": "2026-07-13T14:48:49.667Z",
   "sourceDir": "benchmarks/output",
   "manifestVersion": "0.2.0",
   "suiteId": "guardbench-local-comparative",
@@ -25,9 +25,9 @@
     "evidenceRecall": 1,
     "redactionLeaks": 0,
     "latency": {
-      "p50Ms": 3.501,
-      "p95Ms": 20.658,
-      "maxMs": 20.658
+      "p50Ms": 4.253,
+      "p95Ms": 21.196,
+      "maxMs": 21.196
     }
   },
   "conformance": {
@@ -39,14 +39,14 @@
   "integrity": {
     "artifactHashes": {
       "guardbench-manifest.json": "57636ce19fdaa6e50fc3fc961d9e499a9f43632f588c713a9fefe8e8a6fa724c",
-      "guardbench-summary.json": "88cd54e091e5aa89e7ef873a2e440430b3c35eb3f4664d963a56d197cc3691e9",
-      "guardbench-raw.json": "1888c8524d54f10bb403ef09b923cec63376518bf6d202ef271ba895811d37d8"
+      "guardbench-summary.json": "3ba1c059558aa8b511ae510276078930649ba6aca9669324148726fac10c7ee8",
+      "guardbench-raw.json": "786b03ff8570444620c23b35621bbb14897f06310de7e8bd3a337a1acf5ce776"
     },
     "externalRunMetadataHash": null
   },
   "provenance": {
-    "generatedAt": "2026-07-10T15:00:41.781Z",
-    "gitSha": "af2534b9dc5b980fb879e88ca63afd502480dd24",
+    "generatedAt": "2026-07-13T14:48:49.313Z",
+    "gitSha": "7111c630be69d3ab96439018f094dc4fac826aca",
     "gitDirty": false,
     "node": "v24.18.0",
     "v8": "13.6.233.17-node.50",