superlocalmemory 3.8.13 → 4.0.0

package/src/superlocalmemory/storage/migrations/M039_scene_fact_members.py

@@ -0,0 +1,137 @@
+# Copyright (c) 2026 Varun Pratap Bhardwaj / Qualixar
+# Licensed under AGPL-3.0-or-later
+
+"""M039 — normalized scene/fact membership for bounded assignment.
+
+``memory_scenes.fact_ids_json`` remains the public compatibility format. This
+additive projection provides the indexed reverse lookup needed to map nearest
+fact-vector hits back to candidate scenes without scanning every scene for
+every ingested fact. Triggers keep all existing scene write paths synchronized.
+"""
+
+from __future__ import annotations
+
+import sqlite3
+
+NAME = "M039_scene_fact_members"
+DB_TARGET = "memory"
+
+DDL = """
+BEGIN IMMEDIATE;
+
+-- Keep the deferred migration independently safe for partial/legacy installs.
+-- On normal daemon startup MemoryEngine has already created this table.
+CREATE TABLE IF NOT EXISTS memory_scenes (
+    scene_id        TEXT PRIMARY KEY,
+    profile_id      TEXT NOT NULL DEFAULT 'default',
+    theme           TEXT NOT NULL DEFAULT '',
+    fact_ids_json   TEXT NOT NULL DEFAULT '[]',
+    entity_ids_json TEXT NOT NULL DEFAULT '[]',
+    created_at      TEXT NOT NULL DEFAULT (datetime('now')),
+    last_updated    TEXT NOT NULL DEFAULT (datetime('now')),
+    FOREIGN KEY (profile_id) REFERENCES profiles(profile_id) ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS idx_scenes_profile ON memory_scenes(profile_id);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_scenes_profile_scene
+    ON memory_scenes (profile_id, scene_id);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_facts_profile_fact
+    ON atomic_facts (profile_id, fact_id);
+
+CREATE TABLE IF NOT EXISTS scene_fact_members (
+    profile_id TEXT NOT NULL,
+    scene_id   TEXT NOT NULL,
+    fact_id    TEXT NOT NULL,
+    position   INTEGER NOT NULL DEFAULT 0,
+    PRIMARY KEY (scene_id, fact_id),
+    FOREIGN KEY (profile_id, scene_id)
+        REFERENCES memory_scenes(profile_id, scene_id) ON DELETE CASCADE,
+    FOREIGN KEY (profile_id, fact_id)
+        REFERENCES atomic_facts(profile_id, fact_id) ON DELETE CASCADE,
+    FOREIGN KEY (profile_id) REFERENCES profiles(profile_id) ON DELETE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS idx_scene_fact_members_lookup
+    ON scene_fact_members (profile_id, fact_id, scene_id);
+CREATE INDEX IF NOT EXISTS idx_scene_fact_members_order
+    ON scene_fact_members (scene_id, position);
+
+CREATE TRIGGER IF NOT EXISTS trg_scene_fact_members_insert
+AFTER INSERT ON memory_scenes
+BEGIN
+    DELETE FROM scene_fact_members WHERE scene_id = NEW.scene_id;
+    INSERT OR IGNORE INTO scene_fact_members
+        (profile_id, scene_id, fact_id, position)
+    SELECT NEW.profile_id, NEW.scene_id, af.fact_id, CAST(member.key AS INTEGER)
+    FROM json_each(
+        CASE WHEN json_valid(NEW.fact_ids_json)
+             THEN NEW.fact_ids_json ELSE '[]' END
+    ) AS member
+    JOIN atomic_facts AS af
+      ON af.fact_id = member.value
+     AND af.profile_id = NEW.profile_id;
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_scene_fact_members_update
+AFTER UPDATE OF profile_id, fact_ids_json ON memory_scenes
+BEGIN
+    DELETE FROM scene_fact_members WHERE scene_id = NEW.scene_id;
+    INSERT OR IGNORE INTO scene_fact_members
+        (profile_id, scene_id, fact_id, position)
+    SELECT NEW.profile_id, NEW.scene_id, af.fact_id, CAST(member.key AS INTEGER)
+    FROM json_each(
+        CASE WHEN json_valid(NEW.fact_ids_json)
+             THEN NEW.fact_ids_json ELSE '[]' END
+    ) AS member
+    JOIN atomic_facts AS af
+      ON af.fact_id = member.value
+     AND af.profile_id = NEW.profile_id;
+END;
+
+INSERT OR IGNORE INTO scene_fact_members
+    (profile_id, scene_id, fact_id, position)
+SELECT ms.profile_id, ms.scene_id, af.fact_id, CAST(member.key AS INTEGER)
+FROM memory_scenes AS ms
+JOIN json_each(
+    CASE WHEN json_valid(ms.fact_ids_json) THEN ms.fact_ids_json ELSE '[]' END
+) AS member
+JOIN atomic_facts AS af
+  ON af.fact_id = member.value
+ AND af.profile_id = ms.profile_id;
+
+COMMIT;
+"""
+
+
+def verify(conn: sqlite3.Connection) -> bool:
+    """Verify the table, covering indexes, and synchronization triggers."""
+    objects = {
+        (str(row[0]), str(row[1]))
+        for row in conn.execute(
+            "SELECT name, type FROM sqlite_master "
+            "WHERE name IN (?, ?, ?, ?, ?, ?, ?)"
+            ,
+            (
+                "scene_fact_members",
+                "idx_scene_fact_members_lookup",
+                "idx_scene_fact_members_order",
+                "trg_scene_fact_members_insert",
+                "trg_scene_fact_members_update",
+                "uq_scenes_profile_scene",
+                "uq_facts_profile_fact",
+            ),
+        ).fetchall()
+    }
+    return objects == {
+        ("scene_fact_members", "table"),
+        ("idx_scene_fact_members_lookup", "index"),
+        ("idx_scene_fact_members_order", "index"),
+        ("trg_scene_fact_members_insert", "trigger"),
+        ("trg_scene_fact_members_update", "trigger"),
+        ("uq_scenes_profile_scene", "index"),
+        ("uq_facts_profile_fact", "index"),
+    }
+
+
+def repair(conn: sqlite3.Connection) -> None:
+    """Restore an accidentally dropped projection and re-backfill it."""
+    conn.executescript(DDL)

package/src/superlocalmemory/storage/migrations/__init__.py

@@ -28,7 +28,8 @@ from . import (
     M020_model_state_integrity,
     M029_behavioral_history_indexes,
     M030_entity_explorer_indexes,
-    M033_learning_feedback_channel,
+    M038_learning_feedback_channel,
+    M039_scene_fact_members,
 )
 
 # ---------------------------------------------------------------------------
@@ -82,7 +83,8 @@ __all__ = (
     "M020_model_state_integrity",
     "M029_behavioral_history_indexes",
     "M030_entity_explorer_indexes",
-    "M033_learning_feedback_channel",
+    "M038_learning_feedback_channel",
+    "M039_scene_fact_members",
     # Legacy re-exports (backward compat):
     "CURRENT_SCHEMA_VERSION",
     "get_schema_version",

package/src/superlocalmemory/storage/schema.py

@@ -43,6 +43,7 @@ _TABLES: Final[tuple[str, ...]] = (
     "entity_aliases",
     "entity_profiles",
     "memory_scenes",
+    "scene_fact_members",
     "temporal_events",
     "graph_edges",
     "consolidation_log",
@@ -179,6 +180,8 @@ CREATE TABLE IF NOT EXISTS atomic_facts (
     embedding          TEXT,
     fisher_mean        TEXT,
     fisher_variance    TEXT,
+    -- Tracks how many accesses had Fisher applied; delta-based update in maintenance
+    fisher_last_applied_access INTEGER NOT NULL DEFAULT 0,
 
     -- Lifecycle
     lifecycle          TEXT NOT NULL DEFAULT 'active'
@@ -452,6 +455,67 @@ CREATE TABLE IF NOT EXISTS memory_scenes (
 
 CREATE INDEX IF NOT EXISTS idx_scenes_profile
     ON memory_scenes (profile_id);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_scenes_profile_scene
+    ON memory_scenes (profile_id, scene_id);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_facts_profile_fact
+    ON atomic_facts (profile_id, fact_id);
+"""
+
+
+# ---------------------------------------------------------------------------
+# Normalized scene/fact membership projection (bounded scene assignment)
+# ---------------------------------------------------------------------------
+
+_SQL_SCENE_FACT_MEMBERS: Final[str] = """
+CREATE TABLE IF NOT EXISTS scene_fact_members (
+    profile_id TEXT NOT NULL,
+    scene_id   TEXT NOT NULL,
+    fact_id    TEXT NOT NULL,
+    position   INTEGER NOT NULL DEFAULT 0,
+    PRIMARY KEY (scene_id, fact_id),
+    FOREIGN KEY (profile_id, scene_id)
+        REFERENCES memory_scenes(profile_id, scene_id) ON DELETE CASCADE,
+    FOREIGN KEY (profile_id, fact_id)
+        REFERENCES atomic_facts(profile_id, fact_id) ON DELETE CASCADE,
+    FOREIGN KEY (profile_id) REFERENCES profiles(profile_id) ON DELETE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS idx_scene_fact_members_lookup
+    ON scene_fact_members (profile_id, fact_id, scene_id);
+CREATE INDEX IF NOT EXISTS idx_scene_fact_members_order
+    ON scene_fact_members (scene_id, position);
+
+CREATE TRIGGER IF NOT EXISTS trg_scene_fact_members_insert
+AFTER INSERT ON memory_scenes
+BEGIN
+    DELETE FROM scene_fact_members WHERE scene_id = NEW.scene_id;
+    INSERT OR IGNORE INTO scene_fact_members
+        (profile_id, scene_id, fact_id, position)
+    SELECT NEW.profile_id, NEW.scene_id, af.fact_id, CAST(member.key AS INTEGER)
+    FROM json_each(
+        CASE WHEN json_valid(NEW.fact_ids_json)
+             THEN NEW.fact_ids_json ELSE '[]' END
+    ) AS member
+    JOIN atomic_facts AS af
+      ON af.fact_id = member.value
+     AND af.profile_id = NEW.profile_id;
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_scene_fact_members_update
+AFTER UPDATE OF profile_id, fact_ids_json ON memory_scenes
+BEGIN
+    DELETE FROM scene_fact_members WHERE scene_id = NEW.scene_id;
+    INSERT OR IGNORE INTO scene_fact_members
+        (profile_id, scene_id, fact_id, position)
+    SELECT NEW.profile_id, NEW.scene_id, af.fact_id, CAST(member.key AS INTEGER)
+    FROM json_each(
+        CASE WHEN json_valid(NEW.fact_ids_json)
+             THEN NEW.fact_ids_json ELSE '[]' END
+    ) AS member
+    JOIN atomic_facts AS af
+      ON af.fact_id = member.value
+     AND af.profile_id = NEW.profile_id;
+END;
 """
 
 
@@ -803,6 +867,7 @@ _DDL_ORDERED: Final[tuple[str, ...]] = (
     _SQL_ENTITY_ALIASES,
     _SQL_ENTITY_PROFILES,
     _SQL_MEMORY_SCENES,
+    _SQL_SCENE_FACT_MEMBERS,
     _SQL_TEMPORAL_EVENTS,
     _SQL_GRAPH_EDGES,
     _SQL_CONSOLIDATION_LOG,
@@ -887,6 +952,8 @@ def drop_all_tables(conn: sqlite3.Connection) -> None:
         "atomic_facts_fts_insert",
         "atomic_facts_fts_delete",
         "atomic_facts_fts_update",
+        "trg_scene_fact_members_insert",
+        "trg_scene_fact_members_update",
     ):
         conn.execute(f"DROP TRIGGER IF EXISTS {trigger}")
 

package/src/superlocalmemory/storage/write_coordinator.py

@@ -67,6 +67,16 @@ class CommandRejectedError(WriteCoordinatorError):
         self.error_code = error_code
 
 
+class WriterStalledError(WriteCoordinatorError):
+    """Raised by submit()/execute() when the worker thread has stalled past STALL_THRESHOLD.
+
+    This is the circuit-breaker fast-fail: instead of enqueueing behind a dead worker
+    (causing every new caller to wait for their per-item timeout), new callers get
+    this immediate, actionable error. Admin remediation: check /operations/failed,
+    then restart the daemon if the stall persists.
+    """
+
+
 class Lane(StrEnum):
     """Scheduling lanes, ordered to protect foreground memory operations."""
 
@@ -236,12 +246,18 @@ class WriteCoordinator:
     this coordinator.
     """
 
+    #: Default stall threshold in seconds. Well above the per-item 1s deadline.
+    #: The watchdog is inert for any item that completes within this window,
+    #: preserving healthy-path performance byte-for-byte.
+    _DEFAULT_STALL_THRESHOLD_S: float = 30.0
+
     def __init__(
         self,
         db_path: str | Path,
         *,
         owner_id: str | None = None,
         max_queue_depth: int = _MAX_QUEUE_DEPTH,
+        stall_threshold: float | None = None,
     ) -> None:
         if max_queue_depth < 1:
             raise ValueError("max_queue_depth must be at least one")
@@ -274,6 +290,15 @@ class WriteCoordinator:
         self._worker_ident: int | None = None
         self._capability_token = object()
         self._handlers: dict[CommandKind, CommandHandler] = {}
+        # ---- Stall watchdog state (additive — inert on the healthy path) ----
+        # Protected by self._condition for thread-safety.
+        self._stall_threshold: float = (
+            stall_threshold if stall_threshold is not None else self._DEFAULT_STALL_THRESHOLD_S
+        )
+        self._inflight_started_at: float | None = None
+        self._inflight_op_id: str | None = None
+        self._writer_stalled: bool = False
+        self._stall_logged_once: bool = False
 
     @property
     def db_path(self) -> Path:
@@ -285,6 +310,46 @@ class WriteCoordinator:
         """Opaque daemon instance identifier recorded in the ownership lease."""
         return self._owner_id
 
+    @property
+    def stall_threshold(self) -> float:
+        """Seconds before an in-flight item is considered stalled."""
+        return self._stall_threshold
+
+    @property
+    def writer_stalled(self) -> bool:
+        """True when the worker thread has exceeded stall_threshold on one item.
+
+        This is a dynamic check — computed from the current inflight age without
+        requiring a submitter to trigger _check_stall(). Safe to poll from any thread.
+        """
+        with self._condition:
+            if self._writer_stalled:
+                return True
+            started = self._inflight_started_at
+            if started is None:
+                return False
+            return (time.monotonic() - started) > self._stall_threshold
+
+    def inflight_info(self) -> dict:
+        """Return stall health snapshot for /health and get_status.
+
+        Returns:
+            {"stalled": bool, "op_id": str | None, "age_s": float | None}
+
+        Pure read — never raises.
+        """
+        with self._condition:
+            started = self._inflight_started_at
+            stalled = self._writer_stalled
+            op_id = self._inflight_op_id
+        if started is None:
+            return {"stalled": False, "op_id": None, "age_s": None}
+        now = time.monotonic()
+        age = now - started
+        # Dynamic stall check (same logic as writer_stalled property)
+        is_stalled = stalled or (age > self._stall_threshold)
+        return {"stalled": is_stalled, "op_id": op_id, "age_s": round(age, 2)}
+
     def claim_ownership(self) -> bool:
         """Claim the cross-platform owner lease without waiting on another daemon."""
         if _portalocker is None:
@@ -407,6 +472,34 @@ class WriteCoordinator:
         if context is not None:
             context.__exit__(None, None, None)
 
+    def _check_stall(self) -> None:
+        """Circuit-breaker check: raise WriterStalledError if worker is stalled.
+
+        Called from submit() and execute() BEFORE enqueueing. Inert on the
+        healthy path (started_at is None or within stall_threshold).
+        Thread-safe: reads only condition-protected state.
+        """
+        with self._condition:
+            started = self._inflight_started_at
+            if started is None:
+                return
+            age = time.monotonic() - started
+            if age > self._stall_threshold:
+                if not self._stall_logged_once:
+                    import logging as _log
+                    _log.getLogger(__name__).critical(
+                        "WriteCoordinator: worker thread stalled for %.1fs on op=%s; "
+                        "new submitters will receive WriterStalledError",
+                        age,
+                        self._inflight_op_id,
+                    )
+                    self._stall_logged_once = True
+                self._writer_stalled = True
+            if self._writer_stalled:
+                raise WriterStalledError(
+                    "write subsystem stalled; admin remediation required"
+                )
+
     def execute(
         self,
         sql: str,
@@ -424,6 +517,7 @@ class WriteCoordinator:
             raise ValueError("sql must be a non-empty statement")
         if timeout <= 0:
             raise ValueError("timeout must be greater than zero")
+        self._check_stall()  # circuit-breaker (inert if no stall)
         lane = self._coerce_lane(priority)
         self.start()
         item = _Execution(
@@ -467,6 +561,7 @@ class WriteCoordinator:
             raise TypeError("command must be a WriteCommand")
         if timeout <= 0:
             raise ValueError("timeout must be greater than zero")
+        self._check_stall()  # circuit-breaker (inert if no stall)
         lane = self._coerce_lane(priority)
         self.start()
         item = _Execution(
@@ -569,8 +664,25 @@ class WriteCoordinator:
         return Lane.FOREGROUND
 
     def _execute_item(self, conn: sqlite3.Connection, item: _Execution) -> None:
+        # ------------------------------------------------------------------
+        # Stall watchdog: record inflight state so _check_stall() can detect
+        # a frozen worker.  Cleared in the finally block.  This guard is
+        # strictly ADDITIVE — the item execution path is unchanged.
+        # ------------------------------------------------------------------
+        op_id: str | None = None
+        if item.command is not None:
+            op_id = item.command.command_id
+        with self._condition:
+            self._inflight_started_at = time.monotonic()
+            self._inflight_op_id = op_id
+
         if item.cancelled or time.monotonic() >= item.deadline:
             item.error = WriteDeadlineExceededError("canonical write expired before execution")
+            with self._condition:
+                self._inflight_started_at = None
+                self._inflight_op_id = None
+                self._writer_stalled = False
+                self._stall_logged_once = False
             item.completion.set()
             return
         remaining = max(0.0, item.deadline - time.monotonic())
@@ -578,6 +690,11 @@ class WriteCoordinator:
             item.error = WriteDeadlineExceededError(
                 "canonical write expired waiting for its process lock"
             )
+            with self._condition:
+                self._inflight_started_at = None
+                self._inflight_op_id = None
+                self._writer_stalled = False
+                self._stall_logged_once = False
             item.completion.set()
             return
         try:
@@ -637,6 +754,13 @@ class WriteCoordinator:
             item.error.__cause__ = exc
         finally:
             self._process_write_lock.release()
+            # Clear inflight state and reset stall breaker so next caller can proceed.
+            with self._condition:
+                self._inflight_started_at = None
+                self._inflight_op_id = None
+                if self._writer_stalled:
+                    self._writer_stalled = False
+                    self._stall_logged_once = False
             item.completion.set()
 
     def _execute_command(self, conn: sqlite3.Connection, command: WriteCommand) -> WriteResult:
@@ -800,4 +924,5 @@ __all__ = [
     "WriteCoordinatorError",
     "WriteDeadlineExceededError",
     "WriteResult",
+    "WriterStalledError",
 ]

package/src/superlocalmemory/trust/scorer.py

@@ -73,10 +73,34 @@ class TrustScorer:
         return self._compute_trust(alpha, beta)
 
     def get_fact_trust(self, fact_id: str, profile_id: str) -> float:
-        """Get trust for a fact. Inherits source agent trust, modified by
-        any contradiction evidence recorded directly against the fact."""
-        alpha, beta = self._get_beta_params("fact", fact_id, profile_id)
-        return self._compute_trust(alpha, beta)
+        """Get trust for a fact.
+
+        When a direct trust record exists for the fact, use it.
+        Otherwise inherit the trust of the agent that created the fact,
+        as recorded in the provenance table.
+        """
+        rows = self._db.execute(
+            "SELECT trust_score, evidence_count FROM trust_scores "
+            "WHERE target_type = ? AND target_id = ? AND profile_id = ?",
+            ("fact", fact_id, profile_id),
+        )
+        if rows:
+            d = dict(rows[0])
+            alpha, beta = self._decode_beta(d["trust_score"], d["evidence_count"])
+            return self._compute_trust(alpha, beta)
+
+        # No direct record — inherit from the provenance source agent.
+        prov = self._db.execute(
+            "SELECT created_by FROM provenance "
+            "WHERE fact_id = ? AND profile_id = ?",
+            (fact_id, profile_id),
+        )
+        if prov:
+            agent_id = dict(prov[0]).get("created_by", "")
+            if agent_id:
+                return self.get_agent_trust(agent_id, profile_id)
+
+        return _DEFAULT_TRUST
 
     def get_entity_trust(self, entity_id: str, profile_id: str) -> float:
         """Convenience: get trust for an entity."""

package/src/superlocalmemory/ui/index.html

@@ -49,8 +49,8 @@
         <input id="q" placeholder="Search memories…">
         <span class="kbd">⌘K</span>
       </label>
-      <span class="badge-local" title="All data stays on this machine. Nothing leaves your device.">
-        <i class="bi bi-lock-fill" aria-hidden="true"></i> LOCAL ONLY
+      <span class="badge-local" title="Local-first memory; active mode and integrations determine network egress.">
+        <i class="bi bi-lock-fill" aria-hidden="true"></i> LOCAL-FIRST
       </span>
       <button class="btn icon ghost" data-theme-icon aria-label="Toggle theme"></button>
     </header>
@@ -973,7 +973,10 @@
                     <h6 class="mb-2">Active retention policies</h6>
                     <div class="mb-3" id="compliance-policies-content"><span class="text-muted">Loading...</span></div>
                     <div class="d-flex justify-content-between align-items-center mb-2">
-                        <h6 class="mb-0">Audit trail</h6>
+                        <div class="d-flex align-items-center gap-2">
+                            <h6 class="mb-0">Audit trail</h6>
+                            <span id="cp-chain-integrity"></span>
+                        </div>
                         <select class="form-select form-select-sm" id="cp-audit-filter" style="width: auto;" data-act-change="load-compliance">
                             <option value="">All events</option>
                             <option value="recall">Recall</option>
@@ -986,6 +989,12 @@
                     </div>
                     <div id="compliance-audit-content"><span class="text-muted">Loading...</span></div>
                 </section>
+
+                <!-- Admin Operations Health is provided as a self-injected tab by
+                     ui/js/od-ops-health.js (fetches /operations/failed, KPI strip,
+                     writer-stall banner, one-click Retry/Reconcile/Cancel). The earlier
+                     static shell here was unpopulated and carried an inline handler, so it
+                     was removed in favour of the single functional CSP-clean tab. -->
             </div>
 
             <!-- Skill Evolution (v3.4.10 — Arsenal Evolution) -->
@@ -1569,6 +1578,8 @@
     <script src="static/js/od-components.js?v=382"></script>
     <script src="static/js/od-health.js?v=382"></script>
     <script src="static/js/od-operations.js?v=380"></script>
+    <script src="static/js/od-compliance-ext.js?v=100"></script>
+    <script src="static/js/od-ops-health.js?v=400"></script>
     <script src="static/js/od-team.js?v=379"></script>
     <script src="static/js/od-graph.js?v=379"></script>
     <script src="static/js/od-memories.js?v=379"></script>

package/src/superlocalmemory/ui/js/auto-settings.js

@@ -195,12 +195,23 @@ async function loadModeSettings() {
 
         var bannerDetail = document.getElementById('settings-current-detail');
         if (bannerDetail) {
-            if (mode === 'a') bannerDetail.textContent = 'Zero cloud — EU AI Act compliant';
+            if (mode === 'a') bannerDetail.textContent = 'Local inference — legal classification requires deployment assessment';
             else if (data.has_key) bannerDetail.textContent = 'API key configured';
             else if (provider === 'ollama') bannerDetail.textContent = 'No API key needed';
             else bannerDetail.textContent = 'API key not set';
         }
 
+        var postureBadge = document.querySelector('.badge-local');
+        if (postureBadge) {
+            if (mode === 'c') {
+                postureBadge.innerHTML = '<i class="bi bi-cloud" aria-hidden="true"></i> CLOUD MODE';
+                postureBadge.title = 'Mode C can use configured cloud providers and integrations.';
+            } else {
+                postureBadge.innerHTML = '<i class="bi bi-lock-fill" aria-hidden="true"></i> LOCAL INFERENCE';
+                postureBadge.title = 'Inference is local; mesh, integrations, and backups have separate egress controls.';
+            }
+        }
+
         var banner = document.getElementById('settings-current-banner');
         if (banner) {
             banner.className = mode === 'a' ? 'alert alert-success mb-3' :

package/src/superlocalmemory/ui/js/brain.js

@@ -1066,10 +1066,12 @@
       'aria-live': 'polite',
     });
     btn.addEventListener('click', async () => {
-      const ok = window.confirm(
-        'Reset all learning data? Memories will be preserved, '
-        + 'but learned patterns and ranking signals will be deleted.',
-      );
+      const ok = await window.confirmDestructive({
+        title: 'Reset learning data',
+        target: 'All learned patterns and ranking signals',
+        consequence: 'Memories will be preserved, but learned patterns and ranking signals will be deleted.',
+        confirmLabel: 'Reset',
+      });
       if (!ok) return;
       status.textContent = 'Resetting…';
       try {