audrey 1.1.0 → 1.1.2

package/docs/paper/output/submission-bundle/benchmarks/output/leaderboard/guardbench-leaderboard.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "1.0.0",
   "suite": "GuardBench leaderboard",
-  "generatedAt": "2026-07-10T15:00:42.478Z",
+  "generatedAt": "2026-07-13T14:48:50.016Z",
   "ranking": [
     "verified bundle",
     "adapter conformance",
@@ -28,9 +28,9 @@
         "evidenceRecall": 1,
         "redactionLeaks": 0,
         "latency": {
-          "p50Ms": 3.501,
-          "p95Ms": 20.658,
-          "maxMs": 20.658
+          "p50Ms": 4.253,
+          "p95Ms": 21.196,
+          "maxMs": 21.196
         }
       },
       "conformance": {
@@ -41,7 +41,7 @@
       },
       "source": {
         "dir": "benchmarks/output/submission-bundle",
-        "manifestGeneratedAt": "2026-07-10T15:00:42.148Z",
+        "manifestGeneratedAt": "2026-07-13T14:48:49.680Z",
         "fileCount": 17
       },
       "verification": {

package/docs/paper/output/submission-bundle/benchmarks/output/leaderboard/guardbench-leaderboard.md

@@ -1,7 +1,7 @@
 # GuardBench Leaderboard
 
-Generated: 2026-07-10T15:00:42.478Z
+Generated: 2026-07-13T14:48:50.016Z
 
 | Rank | Subject | Verified | Conformant | Full Contract | Decision Accuracy | Evidence Recall | Redaction Leaks | p95 Latency | Bundle |
 |---:|---|---:|---:|---:|---:|---:|---:|---:|---|
-| 1 | Audrey Guard | yes | yes | 100.0% | 100.0% | 100.0% | 0 | 20.658ms | benchmarks/output/submission-bundle |
+| 1 | Audrey Guard | yes | yes | 100.0% | 100.0% | 100.0% | 0 | 21.196ms | benchmarks/output/submission-bundle |

package/docs/paper/output/submission-bundle/benchmarks/output/submission-bundle/submission-manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "1.0.0",
   "suite": "GuardBench submission bundle",
-  "generatedAt": "2026-07-10T15:00:42.148Z",
+  "generatedAt": "2026-07-13T14:48:49.680Z",
   "sourceDir": "benchmarks/output",
   "subject": {
     "name": "Audrey Guard",
@@ -16,9 +16,9 @@
     "evidenceRecall": 1,
     "redactionLeaks": 0,
     "latency": {
-      "p50Ms": 3.501,
-      "p95Ms": 20.658,
-      "maxMs": 20.658
+      "p50Ms": 4.253,
+      "p95Ms": 21.196,
+      "maxMs": 21.196
     }
   },
   "conformance": {
@@ -45,7 +45,7 @@
     {
       "path": "guardbench-conformance-card.json",
       "bytes": 1735,
-      "sha256": "f7e755fdc52216dbe387f28b3acdd6068b51b908db0cabde455b6d793b62ed43"
+      "sha256": "8613dfacbf592e7d409b38f7c92ffa188bc5e8dc18664fc338b4de2ad80a9f6a"
     },
     {
       "path": "guardbench-manifest.json",
@@ -54,13 +54,13 @@
     },
     {
       "path": "guardbench-raw.json",
-      "bytes": 43454,
-      "sha256": "1888c8524d54f10bb403ef09b923cec63376518bf6d202ef271ba895811d37d8"
+      "bytes": 43837,
+      "sha256": "786b03ff8570444620c23b35621bbb14897f06310de7e8bd3a337a1acf5ce776"
     },
     {
       "path": "guardbench-summary.json",
-      "bytes": 69347,
-      "sha256": "88cd54e091e5aa89e7ef873a2e440430b3c35eb3f4664d963a56d197cc3691e9"
+      "bytes": 70085,
+      "sha256": "3ba1c059558aa8b511ae510276078930649ba6aca9669324148726fac10c7ee8"
     },
     {
       "path": "schemas/guardbench-adapter-registry.schema.json",
@@ -125,7 +125,7 @@
     {
       "path": "validation-report.json",
       "bytes": 739,
-      "sha256": "9db6530947c3f88de484235f44eaa47e7aca98dee8d3603ea0daf067d28a98d3"
+      "sha256": "b8358a7b2833672d06b44809aff428211b9936e7e91a913b45d49248b66de701"
     }
   ]
 }

package/docs/paper/output/submission-bundle/benchmarks/output/submission-bundle/validation-report.json

@@ -1,5 +1,5 @@
 {
-  "generatedAt": "2026-07-10T15:00:42.148Z",
+  "generatedAt": "2026-07-13T14:48:49.680Z",
   "sourceValidation": {
     "ok": true,
     "dir": "benchmarks/output",

package/docs/paper/output/submission-bundle/benchmarks/output/summary.json

@@ -1,5 +1,5 @@
 {
-  "generatedAt": "2026-07-10T15:00:37.705Z",
+  "generatedAt": "2026-07-13T14:48:45.265Z",
   "command": "node benchmarks/run.js --provider mock --dimensions 64",
   "config": {
     "provider": "mock",
@@ -23,19 +23,19 @@
         "system": "Audrey",
         "scorePercent": 100,
         "passRate": 100,
-        "avgDurationMs": 16.25
+        "avgDurationMs": 16.583333333333332
       },
       {
         "system": "Vector Only",
         "scorePercent": 41.66666666666667,
         "passRate": 25,
-        "avgDurationMs": 0.25
+        "avgDurationMs": 0.16666666666666666
       },
       {
         "system": "Keyword + Recency",
         "scorePercent": 41.66666666666667,
         "passRate": 25,
-        "avgDurationMs": 0.5833333333333334
+        "avgDurationMs": 0.75
       },
       {
         "system": "Recent Window",
@@ -170,7 +170,7 @@
             "system": "Audrey",
             "scorePercent": 100,
             "passRate": 100,
-            "avgDurationMs": 16.375
+            "avgDurationMs": 16.625
           },
           {
             "system": "Vector Only",
@@ -182,7 +182,7 @@
             "system": "Keyword + Recency",
             "scorePercent": 50,
             "passRate": 37.5,
-            "avgDurationMs": 0.875
+            "avgDurationMs": 1
           },
           {
             "system": "Recent Window",
@@ -277,7 +277,7 @@
             "results": [
               {
                 "system": "Audrey",
-                "durationMs": 25,
+                "durationMs": 26,
                 "passed": true,
                 "score": 1,
                 "summary": "retrieved expected evidence",
@@ -289,7 +289,7 @@
               },
               {
                 "system": "Vector Only",
-                "durationMs": 1,
+                "durationMs": 0,
                 "passed": true,
                 "score": 1,
                 "summary": "retrieved expected evidence",
@@ -301,7 +301,7 @@
               },
               {
                 "system": "Keyword + Recency",
-                "durationMs": 7,
+                "durationMs": 8,
                 "passed": true,
                 "score": 1,
                 "summary": "retrieved expected evidence",
@@ -347,7 +347,7 @@
               },
               {
                 "system": "Vector Only",
-                "durationMs": 0,
+                "durationMs": 1,
                 "passed": false,
                 "score": 0.5,
                 "summary": "retrieved expected evidence, but conflicting evidence still appeared later",
@@ -407,7 +407,7 @@
               },
               {
                 "system": "Vector Only",
-                "durationMs": 1,
+                "durationMs": 0,
                 "passed": true,
                 "score": 1,
                 "summary": "retrieved expected evidence",
@@ -518,7 +518,7 @@
             "results": [
               {
                 "system": "Audrey",
-                "durationMs": 14,
+                "durationMs": 15,
                 "passed": true,
                 "score": 1,
                 "summary": "correct abstention",
@@ -643,7 +643,7 @@
               },
               {
                 "system": "Vector Only",
-                "durationMs": 0,
+                "durationMs": 1,
                 "passed": false,
                 "score": 0,
                 "summary": "missed target evidence",
@@ -750,19 +750,19 @@
             "system": "Audrey",
             "scorePercent": 100,
             "passRate": 100,
-            "avgDurationMs": 16
+            "avgDurationMs": 16.5
           },
           {
             "system": "Keyword + Recency",
             "scorePercent": 25,
             "passRate": 0,
-            "avgDurationMs": 0
+            "avgDurationMs": 0.25
           },
           {
             "system": "Vector Only",
             "scorePercent": 12.5,
             "passRate": 0,
-            "avgDurationMs": 0.25
+            "avgDurationMs": 0
           },
           {
             "system": "Recent Window",
@@ -821,7 +821,7 @@
             "results": [
               {
                 "system": "Audrey",
-                "durationMs": 14,
+                "durationMs": 15,
                 "passed": true,
                 "score": 1,
                 "summary": "retrieved expected evidence",
@@ -899,7 +899,7 @@
               },
               {
                 "system": "Keyword + Recency",
-                "durationMs": 0,
+                "durationMs": 1,
                 "passed": false,
                 "score": 0.5,
                 "summary": "no leak, but retrieved tangential context",
@@ -932,7 +932,7 @@
             "results": [
               {
                 "system": "Audrey",
-                "durationMs": 17,
+                "durationMs": 18,
                 "passed": true,
                 "score": 1,
                 "summary": "retrieved expected evidence",
@@ -943,7 +943,7 @@
               },
               {
                 "system": "Vector Only",
-                "durationMs": 1,
+                "durationMs": 0,
                 "passed": false,
                 "score": 0,
                 "summary": "missed target evidence",
@@ -1055,7 +1055,7 @@
             "system": "Audrey",
             "scorePercent": 100,
             "passRate": 100,
-            "avgDurationMs": 15.25
+            "avgDurationMs": 16
           },
           {
             "system": "Vector Only",
@@ -1118,7 +1118,7 @@
             "results": [
               {
                 "system": "Audrey",
-                "durationMs": 20,
+                "durationMs": 21,
                 "passed": true,
                 "score": 1,
                 "summary": "matched all required signals",
@@ -1176,7 +1176,7 @@
             "results": [
               {
                 "system": "Audrey",
-                "durationMs": 14,
+                "durationMs": 15,
                 "passed": true,
                 "score": 1,
                 "summary": "matched all required signals",
@@ -1239,7 +1239,7 @@
                 "score": 1,
                 "summary": "matched all required signals",
                 "topResults": [
-                  "guard_hardened:replay_rejected error:guard receipt already has an outcome: 01KX68PZ5QNVH4SM1NQ0ZEVHTW",
+                  "guard_hardened:replay_rejected error:guard receipt already has an outcome: 01KXDZ7CDYHYCCDW5B9KP7YG7W",
                   "decision:caution verdict:caution risk:0.55 Caution: 1 memory signal, 1 medium severity found before acting.",
                   "warning:recent_failure severity:medium npm test failed 1x recently: Vitest failed with spawn EPERM Before re-running npm test, check what changed since the last failure."
                 ],
@@ -1292,12 +1292,12 @@
             "results": [
               {
                 "system": "Audrey",
-                "durationMs": 12,
+                "durationMs": 13,
                 "passed": true,
                 "score": 1,
                 "summary": "matched all required signals",
                 "topResults": [
-                  "guard_hardened:non_guard_receipt_rejected error:not a guard receipt: 01KX68PZ643S3MRQMYPJ2PK7B3",
+                  "guard_hardened:non_guard_receipt_rejected error:not a guard receipt: 01KXDZ7CEBR5TGNA1TZ3XXB00T",
                   "decision:go verdict:clear risk:0 No relevant memory risks, prior failures, or must-follow procedures were found."
                 ],
                 "retrievalSummary": "guard_hardened:non_guard_receipt_rejected error:not a guard receipt: 01K | decision:go verdict:clear risk:0 No relevant memory risks, prior failure"
@@ -1352,7 +1352,7 @@
         "results": [
           {
             "system": "Audrey",
-            "durationMs": 25,
+            "durationMs": 26,
             "passed": true,
             "score": 1,
             "summary": "retrieved expected evidence",
@@ -1364,7 +1364,7 @@
           },
           {
             "system": "Vector Only",
-            "durationMs": 1,
+            "durationMs": 0,
             "passed": true,
             "score": 1,
             "summary": "retrieved expected evidence",
@@ -1376,7 +1376,7 @@
           },
           {
             "system": "Keyword + Recency",
-            "durationMs": 7,
+            "durationMs": 8,
             "passed": true,
             "score": 1,
             "summary": "retrieved expected evidence",
@@ -1422,7 +1422,7 @@
           },
           {
             "system": "Vector Only",
-            "durationMs": 0,
+            "durationMs": 1,
             "passed": false,
             "score": 0.5,
             "summary": "retrieved expected evidence, but conflicting evidence still appeared later",
@@ -1482,7 +1482,7 @@
           },
           {
             "system": "Vector Only",
-            "durationMs": 1,
+            "durationMs": 0,
             "passed": true,
             "score": 1,
             "summary": "retrieved expected evidence",
@@ -1593,7 +1593,7 @@
         "results": [
           {
             "system": "Audrey",
-            "durationMs": 14,
+            "durationMs": 15,
             "passed": true,
             "score": 1,
             "summary": "correct abstention",
@@ -1718,7 +1718,7 @@
           },
           {
             "system": "Vector Only",
-            "durationMs": 0,
+            "durationMs": 1,
             "passed": false,
             "score": 0,
             "summary": "missed target evidence",
@@ -1824,7 +1824,7 @@
         "results": [
           {
             "system": "Audrey",
-            "durationMs": 14,
+            "durationMs": 15,
             "passed": true,
             "score": 1,
             "summary": "retrieved expected evidence",
@@ -1902,7 +1902,7 @@
           },
           {
             "system": "Keyword + Recency",
-            "durationMs": 0,
+            "durationMs": 1,
             "passed": false,
             "score": 0.5,
             "summary": "no leak, but retrieved tangential context",
@@ -1935,7 +1935,7 @@
         "results": [
           {
             "system": "Audrey",
-            "durationMs": 17,
+            "durationMs": 18,
             "passed": true,
             "score": 1,
             "summary": "retrieved expected evidence",
@@ -1946,7 +1946,7 @@
           },
           {
             "system": "Vector Only",
-            "durationMs": 1,
+            "durationMs": 0,
             "passed": false,
             "score": 0,
             "summary": "missed target evidence",
@@ -2058,7 +2058,7 @@
         "results": [
           {
             "system": "Audrey",
-            "durationMs": 20,
+            "durationMs": 21,
             "passed": true,
             "score": 1,
             "summary": "matched all required signals",
@@ -2116,7 +2116,7 @@
         "results": [
           {
             "system": "Audrey",
-            "durationMs": 14,
+            "durationMs": 15,
             "passed": true,
             "score": 1,
             "summary": "matched all required signals",
@@ -2179,7 +2179,7 @@
             "score": 1,
             "summary": "matched all required signals",
             "topResults": [
-              "guard_hardened:replay_rejected error:guard receipt already has an outcome: 01KX68PZ5QNVH4SM1NQ0ZEVHTW",
+              "guard_hardened:replay_rejected error:guard receipt already has an outcome: 01KXDZ7CDYHYCCDW5B9KP7YG7W",
               "decision:caution verdict:caution risk:0.55 Caution: 1 memory signal, 1 medium severity found before acting.",
               "warning:recent_failure severity:medium npm test failed 1x recently: Vitest failed with spawn EPERM Before re-running npm test, check what changed since the last failure."
             ],
@@ -2232,12 +2232,12 @@
         "results": [
           {
             "system": "Audrey",
-            "durationMs": 12,
+            "durationMs": 13,
             "passed": true,
             "score": 1,
             "summary": "matched all required signals",
             "topResults": [
-              "guard_hardened:non_guard_receipt_rejected error:not a guard receipt: 01KX68PZ643S3MRQMYPJ2PK7B3",
+              "guard_hardened:non_guard_receipt_rejected error:not a guard receipt: 01KXDZ7CEBR5TGNA1TZ3XXB00T",
               "decision:go verdict:clear risk:0 No relevant memory risks, prior failures, or must-follow procedures were found."
             ],
             "retrievalSummary": "guard_hardened:non_guard_receipt_rejected error:not a guard receipt: 01K | decision:go verdict:clear risk:0 No relevant memory risks, prior failure"

package/docs/paper/output/submission-bundle/docs/paper/07-evaluation.md

@@ -24,13 +24,13 @@ These numbers measure Audrey's local call path under an in-process mock embeddin
 
 ## Behavioral Regression Result
 
-The current `benchmarks/output/summary.json` was generated on 2026-07-10T15:00:37.705Z with command `node benchmarks/run.js --provider mock --dimensions 64` (Ledger: E24). It reports:
+The current `benchmarks/output/summary.json` was generated on 2026-07-13T14:48:45.265Z with command `node benchmarks/run.js --provider mock --dimensions 64` (Ledger: E24). It reports:
 
 | System | Score Percent | Pass Rate | Average Duration Ms |
 |---|---:|---:|---:|
-| Audrey | 100 | 100 | 16.25 |
-| Vector Only | 41.66666666666667 | 25 | 0.25 |
-| Keyword + Recency | 41.66666666666667 | 25 | 0.5833333333333334 |
+| Audrey | 100 | 100 | 16.583333333333332 |
+| Vector Only | 41.66666666666667 | 25 | 0.16666666666666666 |
+| Keyword + Recency | 41.66666666666667 | 25 | 0.75 |
 | Recent Window | 37.5 | 25 | 0 |
 
 This output is a regression-gate result. The baselines are toy local baselines used to catch retrieval and lifecycle regressions in the Audrey codebase. They are not external systems, not tuned competitor implementations, and not GuardBench baselines (Ledger: E23-E24). The current suite covers retrieval and operation families such as information extraction, knowledge updates, multi-session reasoning, conflict resolution, procedural learning, privacy boundary, overwrite, delete-and-abstain, semantic merge, and procedural merge (Ledger: E23-E24).
@@ -55,7 +55,7 @@ It reports local adapters only, not external-system comparisons (Ledger: E46):
 | Evidence recall | 100% |
 | Redaction leaks | 0 |
 | Recall-degradation detection | 100% |
-| Guard latency p50 / p95 | 3.501 ms / 20.658 ms |
+| Guard latency p50 / p95 | 4.253 ms / 21.196 ms |
 | Published artifact raw-secret leaks | 0 |
 | Audrey Guard decision accuracy | 100% |
 | No-memory decision accuracy | 10% |

package/docs/paper/output/submission-bundle/docs/paper/audrey-paper-v1.md

@@ -897,13 +897,13 @@ These numbers measure Audrey's local call path under an in-process mock embeddin
 
 ### Behavioral Regression Result
 
-The current `benchmarks/output/summary.json` was generated on 2026-07-10T15:00:37.705Z with command `node benchmarks/run.js --provider mock --dimensions 64` (Ledger: E24). It reports:
+The current `benchmarks/output/summary.json` was generated on 2026-07-13T14:48:45.265Z with command `node benchmarks/run.js --provider mock --dimensions 64` (Ledger: E24). It reports:
 
 | System | Score Percent | Pass Rate | Average Duration Ms |
 |---|---:|---:|---:|
-| Audrey | 100 | 100 | 16.25 |
-| Vector Only | 41.66666666666667 | 25 | 0.25 |
-| Keyword + Recency | 41.66666666666667 | 25 | 0.5833333333333334 |
+| Audrey | 100 | 100 | 16.583333333333332 |
+| Vector Only | 41.66666666666667 | 25 | 0.16666666666666666 |
+| Keyword + Recency | 41.66666666666667 | 25 | 0.75 |
 | Recent Window | 37.5 | 25 | 0 |
 
 This output is a regression-gate result. The baselines are toy local baselines used to catch retrieval and lifecycle regressions in the Audrey codebase. They are not external systems, not tuned competitor implementations, and not GuardBench baselines (Ledger: E23-E24). The current suite covers retrieval and operation families such as information extraction, knowledge updates, multi-session reasoning, conflict resolution, procedural learning, privacy boundary, overwrite, delete-and-abstain, semantic merge, and procedural merge (Ledger: E23-E24).
@@ -926,7 +926,7 @@ It reports local adapters only, not external-system comparisons (Ledger: E46):
 | Evidence recall | 100% |
 | Redaction leaks | 0 |
 | Recall-degradation detection | 100% |
-| Guard latency p50 / p95 | 3.501 ms / 20.658 ms |
+| Guard latency p50 / p95 | 4.253 ms / 21.196 ms |
 | Published artifact raw-secret leaks | 0 |
 | Audrey Guard decision accuracy | 100% |
 | No-memory decision accuracy | 10% |

package/docs/paper/output/submission-bundle/docs/paper/evidence-ledger.md

@@ -49,7 +49,7 @@ Every implementation claim in the paper should point to one or more ledger IDs i
 | E43 - Audrey 1.1 ships one normalized lifecycle adapter and host-specific configuration for current Claude Code and Codex CLIs. `audrey install --host auto` registers MCP and applies hooks for detected hosts from stable executable paths. `hook-config` supports preview, scoped apply, private backups, and idempotent Audrey-handler replacement; `uninstall` supports non-mutating preview and removes Audrey-owned registrations and handlers in the selected scope. Session and prompt hooks inject bounded, agent-scoped context; PreToolUse creates Guard receipts; post-tool events correlate outcomes by `session_id + tool_use_id`; sanitized failures may form durable memories; Stop and PostCompact run due-only maintenance. Codex requires explicit non-managed hook trust through `/hooks`. Hook errors fail open unless `AUDREY_HOOK_FAIL_CLOSED=1`. Coverage remains limited to events and tool paths emitted by the host, and each hook starts a short-lived Audrey process rather than using a persistent daemon. | Automatic lifecycle integration and boundary | README.md; CHANGELOG.md; mcp-server/hooks.ts; mcp-server/index.ts; src/autopilot.ts; tests/autopilot.test.js; tests/hooks-config.test.js; tests/mcp-server.test.js | Yes, build plus 191 focused install, hook, Autopilot, preflight, controller, and HTTP tests passed on 2026-07-10 |
 | E44 - Audrey preflight events now persist `preflight_evidence_ids` and `audrey_guard_action_key`; `memory_validate` accepts optional `preflight_event_id`, action key, and evidence ids, persists them on the validation audit event, and rejects validation lineage when the memory id was not evidence for that preflight. Preflight embedding queries are bounded, while exact action identity hashes the full normalized, redacted action so large inputs with a shared prefix do not collide. | Validation lineage implementation | src/action-key.ts; src/controller.ts; src/preflight.ts; src/audrey.ts; mcp-server/index.ts; tests/controller.test.js | Yes, focused Vitest passed on 2026-07-10, including a large-action prefix-collision regression |
 | E45 - Preflight risk scoring uses a fixed severity map (`info=0.1`, `low=0.25`, `medium=0.55`, `high=0.85`), sorts warnings by severity, and strict mode blocks on high-severity warnings; the scoring path does not consume validation feedback. | Fixed risk scoring boundary | src/preflight.ts:6-60,291-299,332-338; src/feedback.ts:3-18,70-163 | Yes, 2026-05-08 |
-| E46 - `benchmarks/guardbench.js` runs ten local comparative GuardBench scenarios across Audrey Guard, no-memory, recent-window, vector-only, and FTS-only adapters and writes `benchmarks/output/guardbench-summary.json`, `benchmarks/output/guardbench-manifest.json`, and `benchmarks/output/guardbench-raw.json`; the latest local run has Audrey Guard passing 10/10 scenarios with 100% prevention rate, 0% false-block rate, 100% evidence recall, zero decision-output redaction leaks, zero published artifact raw-secret leaks, 100% recall-degradation detection, 100% decision accuracy, and 3.501ms/20.658ms p50/p95 guard latency under the mock-provider methodology. Baseline decision accuracy was no-memory 10%, recent-window 60%, vector-only 40%, and FTS-only 10%, with 0% full-contract pass rate for each baseline. | GuardBench local comparative results | benchmarks/guardbench.js; benchmarks/output/guardbench-summary.json; benchmarks/output/guardbench-manifest.json; benchmarks/output/guardbench-raw.json; package.json | Yes, `npm run bench:guard:check` passed on 2026-05-13 |
+| E46 - `benchmarks/guardbench.js` runs ten local comparative GuardBench scenarios across Audrey Guard, no-memory, recent-window, vector-only, and FTS-only adapters and writes `benchmarks/output/guardbench-summary.json`, `benchmarks/output/guardbench-manifest.json`, and `benchmarks/output/guardbench-raw.json`; the latest local run has Audrey Guard passing 10/10 scenarios with 100% prevention rate, 0% false-block rate, 100% evidence recall, zero decision-output redaction leaks, zero published artifact raw-secret leaks, 100% recall-degradation detection, 100% decision accuracy, and 4.253ms/21.196ms p50/p95 guard latency under the mock-provider methodology. Baseline decision accuracy was no-memory 10%, recent-window 60%, vector-only 40%, and FTS-only 10%, with 0% full-contract pass rate for each baseline. | GuardBench local comparative results | benchmarks/guardbench.js; benchmarks/output/guardbench-summary.json; benchmarks/output/guardbench-manifest.json; benchmarks/output/guardbench-raw.json; package.json | Yes, `npm run bench:guard:check` passed on 2026-05-13 |
 | E47 - GuardBench accepts external ESM adapters through `--adapter`, supports `default`, `adapter`, or `createGuardBenchAdapter()` exports, withholds `expectedDecision` and `requiredEvidence` during adapter execution, then scores adapter output against the same full-contract decision/evidence/redaction checks. | GuardBench external adapter contract | benchmarks/guardbench.js; tests/guardbench.test.js; package.json | Yes, `node scripts/run-vitest.mjs run tests/guardbench.test.js` passed on 2026-05-12 |
 | E48 - Audrey ships a Mem0 Platform GuardBench adapter that uses the current Mem0 REST shape: V3 async memory add with event polling, V2 filtered memory search, and user-entity cleanup. It requires runtime `MEM0_API_KEY` and is not run by default. | First external-system GuardBench adapter | benchmarks/adapters/mem0-platform.mjs; tests/guardbench.test.js; README.md | Import/contract and mocked REST-flow tests passed on 2026-05-12; live Mem0 run not yet executed |
 | E49 - GuardBench ships a credential-free example external adapter and a `bench:guard:adapter-smoke` script so the adapter loader can be exercised through the real CLI path without external credentials. | External adapter smoke path | benchmarks/adapters/example-allow.mjs; package.json; README.md; tests/guardbench.test.js | Yes, `npm run bench:guard:adapter-smoke` passed on 2026-05-12 |

package/docs/paper/output/submission-bundle/docs/paper/output/arxiv/arxiv-manifest.json

@@ -1,11 +1,11 @@
 {
   "schemaVersion": "1.0.0",
   "suite": "Audrey arXiv source package",
-  "generatedAt": "2026-07-10T15:00:47.587Z",
+  "generatedAt": "2026-07-13T14:48:55.293Z",
   "sourceMarkdown": "docs/paper/audrey-paper-v1.md",
   "publicationPack": "docs/paper/publication-pack.json",
   "sourceHashes": {
-    "sourceMarkdown": "d8eca75076e4ce06b1d6f15a5f2c91b2fab6da767c0bd613539b6fb9dace802d",
+    "sourceMarkdown": "7db503c10b25314daa46e31fc65c98d18cd86895fe7bf44501e108626c4a3cac",
     "publicationPack": "a1a523d5938faea72be568b843ac3890e61cea6070b0cfa46acf22ad3d2fb974",
     "referencesBib": "c0bfcaf7bfe37d6933c812e46352be8a95397eaa430a0f5bc94037600a53f654"
   },
@@ -13,8 +13,8 @@
     {
       "path": "main.tex",
       "source": "docs/paper/audrey-paper-v1.md",
-      "bytes": 124811,
-      "sha256": "1dbe78fa0648e70bd02db6ff29352d8af859af25e27eb28e39a3cd78fa0965f9"
+      "bytes": 124825,
+      "sha256": "d9d0cf25cad4e59d6234643eb875bd5d74b4d45acd106e9bc01c7454e7240622"
     },
     {
       "path": "references.bib",

package/docs/paper/output/submission-bundle/docs/paper/output/arxiv/main.tex

@@ -731,13 +731,13 @@ These numbers measure Audrey's local call path under an in-process mock embeddin
 
 \subsection{Behavioral Regression Result}
 
-The current \texttt{benchmarks/output/summary.json} was generated on 2026-07-10T15:00:37.705Z with command \texttt{node benchmarks/run.js --provider mock --dimensions 64} (Ledger: E24). It reports:
+The current \texttt{benchmarks/output/summary.json} was generated on 2026-07-13T14:48:45.265Z with command \texttt{node benchmarks/run.js --provider mock --dimensions 64} (Ledger: E24). It reports:
 
 \begin{verbatim}
 | System | Score Percent | Pass Rate | Average Duration Ms |
-| Audrey | 100 | 100 | 16.25 |
-| Vector Only | 41.66666666666667 | 25 | 0.25 |
-| Keyword + Recency | 41.66666666666667 | 25 | 0.5833333333333334 |
+| Audrey | 100 | 100 | 16.583333333333332 |
+| Vector Only | 41.66666666666667 | 25 | 0.16666666666666666 |
+| Keyword + Recency | 41.66666666666667 | 25 | 0.75 |
 | Recent Window | 37.5 | 25 | 0 |
 \end{verbatim}
 
@@ -761,7 +761,7 @@ It reports local adapters only, not external-system comparisons (Ledger: E46):
 | Evidence recall | 100% |
 | Redaction leaks | 0 |
 | Recall-degradation detection | 100% |
-| Guard latency p50 / p95 | 3.501 ms / 20.658 ms |
+| Guard latency p50 / p95 | 4.253 ms / 21.196 ms |
 | Published artifact raw-secret leaks | 0 |
 | Audrey Guard decision accuracy | 100% |
 | No-memory decision accuracy | 10% |

package/docs/paper/output/submission-bundle/docs/paper/output/arxiv-compile-report.json

@@ -1,13 +1,13 @@
 {
   "schemaVersion": "1.0.0",
   "suite": "Audrey arXiv compile check",
-  "generatedAt": "2026-07-10T15:00:49.374Z",
+  "generatedAt": "2026-07-13T14:48:57.090Z",
   "source": {
     "sourceDir": "docs/paper/output/arxiv",
     "manifest": "docs/paper/output/arxiv/arxiv-manifest.json",
-    "manifestSha256": "9df7fee92964064551d7eb23098800f909f7ae8dc770be2ddcc29ff3cb33723a",
+    "manifestSha256": "de555f986f650735f8b4184eb93504b20d94dbd1e8510d839311fbf7e7d69429",
     "mainTex": "docs/paper/output/arxiv/main.tex",
-    "mainTexSha256": "1dbe78fa0648e70bd02db6ff29352d8af859af25e27eb28e39a3cd78fa0965f9",
+    "mainTexSha256": "d9d0cf25cad4e59d6234643eb875bd5d74b4d45acd106e9bc01c7454e7240622",
     "referencesBib": "docs/paper/output/arxiv/references.bib",
     "referencesBibSha256": "c0bfcaf7bfe37d6933c812e46352be8a95397eaa430a0f5bc94037600a53f654"
   },

package/docs/paper/output/submission-bundle/package.json

@@ -1,6 +1,7 @@
 {
   "name": "audrey",
-  "version": "1.1.0",
+  "version": "1.1.2",
+  "mcpName": "io.github.evilander/audrey",
   "description": "Automatic, evidence-backed memory and pre-action Guard for Codex, Claude Code, and custom AI agents",
   "type": "module",
   "main": "dist/src/index.js",
@@ -221,6 +222,12 @@
   "overrides": {
     "qs": "^6.15.2"
   },
+  "allowScripts": {
+    "better-sqlite3@12.9.0": true,
+    "onnxruntime-node@1.21.0": true,
+    "protobufjs@7.6.5": true,
+    "sharp@0.34.5": true
+  },
   "directories": {
     "example": "examples",
     "test": "tests"