forgetted 0.2.0__tar.gz → 0.2.2__tar.gz

forgetted-0.2.2/LICENSE

@@ -0,0 +1,190 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2026 Rolando Bosch / Hermes Labs
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

{forgetted-0.2.0/forgetted.egg-info → forgetted-0.2.2}/PKG-INFO

@@ -1,16 +1,17 @@
 Metadata-Version: 2.4
 Name: forgetted
-Version: 0.2.0
-Summary: Selective memory governance for AI agents — branch the timeline, never merge back
-Author-email: Hermes Labs <lpcisystems@gmail.com>
+Version: 0.2.2
+Summary: Selective memory governance for AI agents — branch the timeline, never merge back. By Hermes Labs.
+Author-email: Hermes Labs <roli@hermes-labs.ai>
 License: Apache-2.0
-Project-URL: Homepage, https://github.com/roli-lpci/forgetted
-Project-URL: Repository, https://github.com/roli-lpci/forgetted
-Project-URL: Issues, https://github.com/roli-lpci/forgetted/issues
+Project-URL: Homepage, https://hermes-labs.ai
+Project-URL: Repository, https://github.com/hermes-labs-ai/forgetted
+Project-URL: Documentation, https://github.com/hermes-labs-ai/forgetted#readme
+Project-URL: Issues, https://github.com/hermes-labs-ai/forgetted/issues
+Project-URL: Changelog, https://github.com/hermes-labs-ai/forgetted/blob/main/CHANGELOG.md
 Keywords: llm,agent,memory,privacy,ai-safety,fork,selective-forget
 Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved :: Apache Software License
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
@@ -20,36 +21,44 @@ Classifier: Topic :: Security
 Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
 Requires-Python: >=3.9
 Description-Content-Type: text/markdown
+License-File: LICENSE
 Provides-Extra: trash
-Requires-Dist: send2trash>=1.8.0; extra == "trash"
+Requires-Dist: send2trash>=2.1.0; extra == "trash"
 Provides-Extra: dev
-Requires-Dist: pytest>=7.0; extra == "dev"
-Requires-Dist: pytest-cov>=4.0; extra == "dev"
-Requires-Dist: ruff>=0.1.0; extra == "dev"
+Requires-Dist: pytest>=8.4.2; extra == "dev"
+Requires-Dist: pytest-cov>=7.1.0; extra == "dev"
+Requires-Dist: ruff>=0.16.0; extra == "dev"
+Dynamic: license-file
 
 <p align="center">
   <h1 align="center">🫥 forgetted</h1>
   <p align="center"><strong>Your AI agent remembers everything. Now it doesn't have to.</strong></p>
   <p align="center">
-    <a href="https://pypi.org/project/forgetted/"><img src="https://img.shields.io/pypi/v/forgetted?color=blue" alt="PyPI"></a>
-    <a href="https://github.com/roli-lpci/forgetted/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-Apache--2.0-green" alt="License"></a>
-    <a href="https://www.python.org/downloads/"><img src="https://img.shields.io/badge/python-3.9+-blue" alt="Python"></a>
+    <a href="https://pypi.org/project/forgetted/"><img src="https://img.shields.io/pypi/v/forgetted" alt="PyPI"></a>
+    <a href="https://pypi.org/project/forgetted/"><img src="https://img.shields.io/pypi/dm/forgetted" alt="Downloads"></a>
+    <a href="https://github.com/hermes-labs-ai/forgetted"><img src="https://img.shields.io/github/stars/hermes-labs-ai/forgetted" alt="Stars"></a>
+    <a href="https://github.com/hermes-labs-ai/forgetted/blob/main/LICENSE"><img src="https://img.shields.io/pypi/l/forgetted" alt="License"></a>
+    <a href="https://pypi.org/project/forgetted/"><img src="https://img.shields.io/pypi/pyversions/forgetted" alt="Python"></a>
+    <a href="https://github.com/hermes-labs-ai/forgetted/actions/workflows/ci.yml"><img src="https://github.com/hermes-labs-ai/forgetted/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
   </p>
 </p>
 
 ---
 
-**forgetted** gives AI agents selective memory governance. One line of code, and your agent keeps full context but writes nothing to memory.
+**forgetted** is a small Python library that gives AI agents selective memory governance: inside a context-managed window the agent keeps full read access but its writes to memory files, session logs, deliverables, and (optionally) a vector store silently vanish and are cleaned up on exit. One `with` block, and your agent keeps full context but persists nothing.
 
-> Traditional incognito is dumb: no past, no future, fully isolated.
-> **forgetted** gives you: full continuity + selective non-persistence.
+> Traditional incognito is all-or-nothing: no past, no future, fully isolated.
+> **forgetted** keeps full read continuity while making the write side non-persistent for the duration of a window.
+
+Part of the [Hermes Labs reliability stack](https://github.com/hermes-labs-ai).
 
 ```python
 from forgetted import ForgetSession
 
 with ForgetSession("/path/to/workspace"):
     agent.chat("this conversation never happened")
-# ↑ No trace in memory, logs, or vector DB. Agent resumes normally.
+# ↑ Writes through `builtins.open` to protected workspace paths do not persist.
+#    Add an adapter for mem0 or another persistence layer; reads still work.
 ```
 
 ## Why?
@@ -191,29 +200,51 @@ Built-in detection for natural-language triggers:
 
 This is not a UX toggle. It's a **memory governance primitive**.
 
-Like git: you branch, but you never merge back. The conversation exists in context but is never written to the agent's persistent state. After the window closes, it's as if it never happened.
+Like git: you branch, but you never merge back. The conversation exists in context, and the writes it would normally make to the agent's persistent state are intercepted instead. After the window closes, a normal read of the agent's memory and logs shows no trace of it — within the scope described in [Limitations](#limitations).
 
 > *"I want context… but I don't want consequences."*
 
 ## Tested
 
-97 tests including an adversarial suite:
-- ✅ Write blocking (open w/a/x/wb/r+, symlinks, binary)
-- ✅ Trigger detection (zero false positives on "forgot password", "forgetful", etc.)
+99 tests (97 pass, 2 xfail) including an adversarial suite:
+- ✅ Write blocking via `builtins.open` (modes `w`/`a`/`x`/`wb`/`r+`, symlinks resolved, binary)
+- ✅ Trigger detection (no false positive on "I'm so forgetful today", etc.)
 - ✅ Adapter error isolation (one failing adapter doesn't break others)
-- ✅ Exception safety (cleanup runs even if conversation crashes)
+- ✅ Exception safety (cleanup runs even if the conversation crashes)
 - ✅ Idempotency (double-start, stop-before-start, double-stop all safe)
 
-Known limitations are [documented as xfail tests](tests/test_adversarial.py) — not hidden.
+Known bypasses (writes that do **not** go through `builtins.open`, such as `Path.write_text`/`write_bytes` and `os.open`) are documented as [xfail tests](tests/test_adversarial.py) rather than hidden. See [Limitations](#limitations) below.
 
 ## Threat Model
 
-**What forgetted blocks:** Everything the agent controls — memory files, vector DB writes, session logs, deliverables.
+**What forgetted blocks:** Writes that go through `builtins.open` to protected workspace paths (`memory/`, `DELIVERABLES.md`, `*.jsonl`), plus mem0 `add`/`update` when the Mem0Adapter is registered.
+
+**What forgetted does NOT block:** LLM API provider logs, network telemetry, OS-level forensics, and writes that bypass `builtins.open` (see [Limitations](#limitations)). It is a convenience layer for agent-controlled persistence, not a security or containment boundary.
+
+**What you can rely on, within that scope:** writes routed through `builtins.open` to protected paths are intercepted and return no-op handles, so a normal read of the agent's memory and logs afterward does not surface what happened inside the window. This is enforcement by effect (no-op handles + post-window cleanup), not a prompt instruction.
+
+## Limitations
+
+forgetted is a software convenience layer, not a security boundary. Grounded in the code and the [xfail test suite](tests/test_adversarial.py), it does **not**:
 
-**What forgetted does NOT block:** LLM API provider logs, network telemetry, OS-level forensics. That's not the point.
+- **Catch writes that bypass `builtins.open`.** `Path.write_text`, `Path.write_bytes`, `os.open`, C-extension writes, and subprocesses write directly and are not intercepted. These are documented as xfail tests.
+- **Erase data written before the window opened.** It governs writes during the window only; pre-existing memory is untouched.
+- **Block reads.** By design — the agent keeps full read context.
+- **Intercept writes outside the declared workspace path.**
+- **Block network calls, API calls, or external tool use.**
+- **Support concurrent or nested forgetted sessions on the same workspace** — overlapping windows can break the guard's restore chain (xfail tests).
+- **Defend against an adversary inspecting LLM-provider logs, network traffic, or raw disk forensics.**
 
-**The guarantee:** *"If someone looks through the agent's memory and logs, they won't find what you forgetted."*
+For the full machine-readable behavior contract, see [`INTENT.md`](INTENT.md).
+
+If forgetted is useful to you, please [star the repo](https://github.com/hermes-labs-ai/forgetted) — it helps others find it.
 
 ## License
 
 [Apache-2.0](LICENSE) — Hermes Labs
+
+---
+
+## About Hermes Labs
+
+Hermes Labs is an independent AI-reliability lab building open-source tools that catch silent failure modes in production AI. More at [hermes-labs.ai](https://hermes-labs.ai).

forgetted-0.2.0/PKG-INFO → forgetted-0.2.2/README.md

@@ -1,55 +1,32 @@
-Metadata-Version: 2.4
-Name: forgetted
-Version: 0.2.0
-Summary: Selective memory governance for AI agents — branch the timeline, never merge back
-Author-email: Hermes Labs <lpcisystems@gmail.com>
-License: Apache-2.0
-Project-URL: Homepage, https://github.com/roli-lpci/forgetted
-Project-URL: Repository, https://github.com/roli-lpci/forgetted
-Project-URL: Issues, https://github.com/roli-lpci/forgetted/issues
-Keywords: llm,agent,memory,privacy,ai-safety,fork,selective-forget
-Classifier: Development Status :: 3 - Alpha
-Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved :: Apache Software License
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.9
-Classifier: Programming Language :: Python :: 3.10
-Classifier: Programming Language :: Python :: 3.11
-Classifier: Programming Language :: Python :: 3.12
-Classifier: Topic :: Security
-Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
-Requires-Python: >=3.9
-Description-Content-Type: text/markdown
-Provides-Extra: trash
-Requires-Dist: send2trash>=1.8.0; extra == "trash"
-Provides-Extra: dev
-Requires-Dist: pytest>=7.0; extra == "dev"
-Requires-Dist: pytest-cov>=4.0; extra == "dev"
-Requires-Dist: ruff>=0.1.0; extra == "dev"
-
 <p align="center">
   <h1 align="center">🫥 forgetted</h1>
   <p align="center"><strong>Your AI agent remembers everything. Now it doesn't have to.</strong></p>
   <p align="center">
-    <a href="https://pypi.org/project/forgetted/"><img src="https://img.shields.io/pypi/v/forgetted?color=blue" alt="PyPI"></a>
-    <a href="https://github.com/roli-lpci/forgetted/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-Apache--2.0-green" alt="License"></a>
-    <a href="https://www.python.org/downloads/"><img src="https://img.shields.io/badge/python-3.9+-blue" alt="Python"></a>
+    <a href="https://pypi.org/project/forgetted/"><img src="https://img.shields.io/pypi/v/forgetted" alt="PyPI"></a>
+    <a href="https://pypi.org/project/forgetted/"><img src="https://img.shields.io/pypi/dm/forgetted" alt="Downloads"></a>
+    <a href="https://github.com/hermes-labs-ai/forgetted"><img src="https://img.shields.io/github/stars/hermes-labs-ai/forgetted" alt="Stars"></a>
+    <a href="https://github.com/hermes-labs-ai/forgetted/blob/main/LICENSE"><img src="https://img.shields.io/pypi/l/forgetted" alt="License"></a>
+    <a href="https://pypi.org/project/forgetted/"><img src="https://img.shields.io/pypi/pyversions/forgetted" alt="Python"></a>
+    <a href="https://github.com/hermes-labs-ai/forgetted/actions/workflows/ci.yml"><img src="https://github.com/hermes-labs-ai/forgetted/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
   </p>
 </p>
 
 ---
 
-**forgetted** gives AI agents selective memory governance. One line of code, and your agent keeps full context but writes nothing to memory.
+**forgetted** is a small Python library that gives AI agents selective memory governance: inside a context-managed window the agent keeps full read access but its writes to memory files, session logs, deliverables, and (optionally) a vector store silently vanish and are cleaned up on exit. One `with` block, and your agent keeps full context but persists nothing.
+
+> Traditional incognito is all-or-nothing: no past, no future, fully isolated.
+> **forgetted** keeps full read continuity while making the write side non-persistent for the duration of a window.
 
-> Traditional incognito is dumb: no past, no future, fully isolated.
-> **forgetted** gives you: full continuity + selective non-persistence.
+Part of the [Hermes Labs reliability stack](https://github.com/hermes-labs-ai).
 
 ```python
 from forgetted import ForgetSession
 
 with ForgetSession("/path/to/workspace"):
     agent.chat("this conversation never happened")
-# ↑ No trace in memory, logs, or vector DB. Agent resumes normally.
+# ↑ Writes through `builtins.open` to protected workspace paths do not persist.
+#    Add an adapter for mem0 or another persistence layer; reads still work.
 ```
 
 ## Why?
@@ -191,29 +168,51 @@ Built-in detection for natural-language triggers:
 
 This is not a UX toggle. It's a **memory governance primitive**.
 
-Like git: you branch, but you never merge back. The conversation exists in context but is never written to the agent's persistent state. After the window closes, it's as if it never happened.
+Like git: you branch, but you never merge back. The conversation exists in context, and the writes it would normally make to the agent's persistent state are intercepted instead. After the window closes, a normal read of the agent's memory and logs shows no trace of it — within the scope described in [Limitations](#limitations).
 
 > *"I want context… but I don't want consequences."*
 
 ## Tested
 
-97 tests including an adversarial suite:
-- ✅ Write blocking (open w/a/x/wb/r+, symlinks, binary)
-- ✅ Trigger detection (zero false positives on "forgot password", "forgetful", etc.)
+99 tests (97 pass, 2 xfail) including an adversarial suite:
+- ✅ Write blocking via `builtins.open` (modes `w`/`a`/`x`/`wb`/`r+`, symlinks resolved, binary)
+- ✅ Trigger detection (no false positive on "I'm so forgetful today", etc.)
 - ✅ Adapter error isolation (one failing adapter doesn't break others)
-- ✅ Exception safety (cleanup runs even if conversation crashes)
+- ✅ Exception safety (cleanup runs even if the conversation crashes)
 - ✅ Idempotency (double-start, stop-before-start, double-stop all safe)
 
-Known limitations are [documented as xfail tests](tests/test_adversarial.py) — not hidden.
+Known bypasses (writes that do **not** go through `builtins.open`, such as `Path.write_text`/`write_bytes` and `os.open`) are documented as [xfail tests](tests/test_adversarial.py) rather than hidden. See [Limitations](#limitations) below.
 
 ## Threat Model
 
-**What forgetted blocks:** Everything the agent controls — memory files, vector DB writes, session logs, deliverables.
+**What forgetted blocks:** Writes that go through `builtins.open` to protected workspace paths (`memory/`, `DELIVERABLES.md`, `*.jsonl`), plus mem0 `add`/`update` when the Mem0Adapter is registered.
+
+**What forgetted does NOT block:** LLM API provider logs, network telemetry, OS-level forensics, and writes that bypass `builtins.open` (see [Limitations](#limitations)). It is a convenience layer for agent-controlled persistence, not a security or containment boundary.
+
+**What you can rely on, within that scope:** writes routed through `builtins.open` to protected paths are intercepted and return no-op handles, so a normal read of the agent's memory and logs afterward does not surface what happened inside the window. This is enforcement by effect (no-op handles + post-window cleanup), not a prompt instruction.
+
+## Limitations
+
+forgetted is a software convenience layer, not a security boundary. Grounded in the code and the [xfail test suite](tests/test_adversarial.py), it does **not**:
 
-**What forgetted does NOT block:** LLM API provider logs, network telemetry, OS-level forensics. That's not the point.
+- **Catch writes that bypass `builtins.open`.** `Path.write_text`, `Path.write_bytes`, `os.open`, C-extension writes, and subprocesses write directly and are not intercepted. These are documented as xfail tests.
+- **Erase data written before the window opened.** It governs writes during the window only; pre-existing memory is untouched.
+- **Block reads.** By design — the agent keeps full read context.
+- **Intercept writes outside the declared workspace path.**
+- **Block network calls, API calls, or external tool use.**
+- **Support concurrent or nested forgetted sessions on the same workspace** — overlapping windows can break the guard's restore chain (xfail tests).
+- **Defend against an adversary inspecting LLM-provider logs, network traffic, or raw disk forensics.**
 
-**The guarantee:** *"If someone looks through the agent's memory and logs, they won't find what you forgetted."*
+For the full machine-readable behavior contract, see [`INTENT.md`](INTENT.md).
+
+If forgetted is useful to you, please [star the repo](https://github.com/hermes-labs-ai/forgetted) — it helps others find it.
 
 ## License
 
 [Apache-2.0](LICENSE) — Hermes Labs
+
+---
+
+## About Hermes Labs
+
+Hermes Labs is an independent AI-reliability lab building open-source tools that catch silent failure modes in production AI. More at [hermes-labs.ai](https://hermes-labs.ai).

{forgetted-0.2.0 → forgetted-0.2.2}/forgetted/__init__.py

@@ -25,7 +25,7 @@ from .guard import ForgetGuard
 from .session import ForgetSession
 from .trigger import TRIGGERS, is_forget_trigger
 
-__version__ = "0.2.0"
+__version__ = "0.2.2"
 __author__ = "Hermes Labs"
 __all__ = [
     "create_checkpoint",

{forgetted-0.2.0 → forgetted-0.2.2}/forgetted/adapters/mem0.py

@@ -10,13 +10,33 @@ Requires: ``pip install mem0ai`` (optional dependency).
 
 import logging
 import time
-from typing import Any
+from datetime import datetime
+from typing import Any, Optional
 
 from .base import PersistenceAdapter
 
 logger = logging.getLogger(__name__)
 
 
+def _created_at_epoch(value: Any) -> Optional[float]:
+    """Return an epoch for unambiguous mem0 timestamps, else ``None``."""
+    if isinstance(value, (int, float)) and not isinstance(value, bool):
+        return float(value)
+    if not isinstance(value, str):
+        return None
+
+    normalized = value.strip()
+    if normalized.endswith(("Z", "z")):
+        normalized = normalized[:-1] + "+00:00"
+    try:
+        parsed = datetime.fromisoformat(normalized)
+    except ValueError:
+        return None
+    if parsed.tzinfo is None:
+        return None
+    return parsed.timestamp()
+
+
 class Mem0Adapter(PersistenceAdapter):
     """Adapter for mem0 (semantic memory layer).
 
@@ -108,11 +128,8 @@ class Mem0Adapter(PersistenceAdapter):
             memories = all_memories if isinstance(all_memories, list) else all_memories.get("results", [])
             deleted = 0
             for mem in memories:
-                created = mem.get("created_at", 0)
-                # mem0 uses ISO timestamps or epoch — handle both
-                if isinstance(created, str):
-                    continue  # Skip string timestamps for now — timestamp comparison is fragile
-                if created >= self._window_start:
+                created = _created_at_epoch(mem.get("created_at"))
+                if created is not None and created >= self._window_start:
                     try:
                         self._memory.delete(mem["id"])
                         deleted += 1

forgetted-0.2.2/forgetted.egg-info/PKG-INFO

@@ -0,0 +1,250 @@
+Metadata-Version: 2.4
+Name: forgetted
+Version: 0.2.2
+Summary: Selective memory governance for AI agents — branch the timeline, never merge back. By Hermes Labs.
+Author-email: Hermes Labs <roli@hermes-labs.ai>
+License: Apache-2.0
+Project-URL: Homepage, https://hermes-labs.ai
+Project-URL: Repository, https://github.com/hermes-labs-ai/forgetted
+Project-URL: Documentation, https://github.com/hermes-labs-ai/forgetted#readme
+Project-URL: Issues, https://github.com/hermes-labs-ai/forgetted/issues
+Project-URL: Changelog, https://github.com/hermes-labs-ai/forgetted/blob/main/CHANGELOG.md
+Keywords: llm,agent,memory,privacy,ai-safety,fork,selective-forget
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Security
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Provides-Extra: trash
+Requires-Dist: send2trash>=2.1.0; extra == "trash"
+Provides-Extra: dev
+Requires-Dist: pytest>=8.4.2; extra == "dev"
+Requires-Dist: pytest-cov>=7.1.0; extra == "dev"
+Requires-Dist: ruff>=0.16.0; extra == "dev"
+Dynamic: license-file
+
+<p align="center">
+  <h1 align="center">🫥 forgetted</h1>
+  <p align="center"><strong>Your AI agent remembers everything. Now it doesn't have to.</strong></p>
+  <p align="center">
+    <a href="https://pypi.org/project/forgetted/"><img src="https://img.shields.io/pypi/v/forgetted" alt="PyPI"></a>
+    <a href="https://pypi.org/project/forgetted/"><img src="https://img.shields.io/pypi/dm/forgetted" alt="Downloads"></a>
+    <a href="https://github.com/hermes-labs-ai/forgetted"><img src="https://img.shields.io/github/stars/hermes-labs-ai/forgetted" alt="Stars"></a>
+    <a href="https://github.com/hermes-labs-ai/forgetted/blob/main/LICENSE"><img src="https://img.shields.io/pypi/l/forgetted" alt="License"></a>
+    <a href="https://pypi.org/project/forgetted/"><img src="https://img.shields.io/pypi/pyversions/forgetted" alt="Python"></a>
+    <a href="https://github.com/hermes-labs-ai/forgetted/actions/workflows/ci.yml"><img src="https://github.com/hermes-labs-ai/forgetted/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
+  </p>
+</p>
+
+---
+
+**forgetted** is a small Python library that gives AI agents selective memory governance: inside a context-managed window the agent keeps full read access but its writes to memory files, session logs, deliverables, and (optionally) a vector store silently vanish and are cleaned up on exit. One `with` block, and your agent keeps full context but persists nothing.
+
+> Traditional incognito is all-or-nothing: no past, no future, fully isolated.
+> **forgetted** keeps full read continuity while making the write side non-persistent for the duration of a window.
+
+Part of the [Hermes Labs reliability stack](https://github.com/hermes-labs-ai).
+
+```python
+from forgetted import ForgetSession
+
+with ForgetSession("/path/to/workspace"):
+    agent.chat("this conversation never happened")
+# ↑ Writes through `builtins.open` to protected workspace paths do not persist.
+#    Add an adapter for mem0 or another persistence layer; reads still work.
+```
+
+## Why?
+
+AI agents write everything: memory files, session logs, vector embeddings, deliverables. Sometimes you need context without consequences:
+
+- 💬 **Sensitive conversations** that shouldn't persist in agent memory
+- 🧪 **Experiments** you don't want polluting your agent's knowledge base
+- 🔒 **Client data** discussed but not stored
+- 🤔 **Brainstorming** that shouldn't bias future responses
+
+**forgetted** is not a prompt. It's software that wraps the agent's persistence layer — writes silently vanish, reads still work, and the agent resumes normally after.
+
+## Install
+
+```bash
+pip install forgetted
+```
+
+## Quick Start
+
+### Simple (file-level protection)
+
+```python
+from forgetted import ForgetSession
+
+# Everything inside is forgetted — writes to memory/, logs, deliverables vanish
+with ForgetSession("/path/to/agent/workspace"):
+    agent.chat("tell me about the secret project")
+```
+
+### With vector DB protection
+
+```python
+from forgetted import ForgetSession
+from forgetted.adapters.mem0 import Mem0Adapter
+
+session = ForgetSession(
+    workspace="/path/to/workspace",
+    adapters=[Mem0Adapter(memory_instance, user_id="roli")],
+)
+session.start(checkpoint_summary="Discussing API design")
+# ... conversation happens with full context, zero persistence ...
+session.stop()  # re-enables all layers, cleans up
+```
+
+### Trigger detection (for chat agents)
+
+```python
+from forgetted import is_forget_trigger, ForgetSession
+
+if is_forget_trigger(user_message):  # "/forget", "off the record", etc.
+    with ForgetSession(workspace):
+        handle_conversation()
+```
+
+## What Gets Blocked
+
+| Layer | How | Status |
+|---|---|---|
+| Memory files (`memory/*.md`) | `builtins.open` patch | ✅ Blocked |
+| Deliverables / audit logs | `builtins.open` patch | ✅ Blocked |
+| Session logs (`*.jsonl`) | Blocked + deleted on exit | ✅ Blocked |
+| mem0 / semantic memory | Method patch on `add`/`update` | ✅ Blocked |
+| Any custom persistence | Write your own adapter | 🔌 Extensible |
+
+## How It Works
+
+**forgetted** uses a layered defense:
+
+1. **`FileWriteAdapter`** (always on) — patches `builtins.open` to intercept writes to protected paths. Returns no-op file handles instead of raising — agent code doesn't crash, writes just vanish.
+
+2. **`Mem0Adapter`** (opt-in) — patches `memory.add()` and `memory.update()` during the window. Post-window cleanup deletes any memories that leaked through.
+
+3. **`ForgetSession`** orchestrates everything: checkpoint → disable adapters → run conversation → enable adapters → cleanup → delete session log.
+
+Reads are **never** blocked. The agent has full context — it just can't write new context.
+
+## Write Your Own Adapter
+
+Any persistence layer can be controlled:
+
+```python
+from forgetted.adapters.base import PersistenceAdapter
+
+class RedisAdapter(PersistenceAdapter):
+    name = "redis"
+
+    def disable(self):
+        self._client.config_set("save", "")
+        self._active = True
+
+    def enable(self):
+        self._client.config_set("save", "3600 1")
+        self._active = False
+
+    def cleanup(self):
+        for key in self._window_keys:
+            self._client.delete(key)
+
+    @property
+    def is_active(self): return self._active
+```
+
+Register it: `ForgetSession(workspace, adapters=[RedisAdapter(client)])`
+
+## Trigger Phrases
+
+Built-in detection for natural-language triggers:
+
+| Trigger | Example |
+|---|---|
+| `/forgetted` | "/forgetted" |
+| `/forget` | "/forget" |
+| `forget this` | "hey, forget this conversation" |
+| `off the record` | "let's go off the record" |
+| `forgetted mode` | "enable forgetted mode" |
+| `don't remember this` | "don't remember this" |
+
+## Architecture
+
+```
+┌─────────────────────────────────────────┐
+│           ForgetSession                  │
+│  (orchestrator — context manager)        │
+├─────────────────────────────────────────┤
+│  ┌──────────────┐  ┌──────────────┐     │
+│  │ FileWrite    │  │ Mem0         │     │
+│  │ Adapter      │  │ Adapter      │ ... │
+│  │ (safety net) │  │ (opt-in)     │     │
+│  └──────────────┘  └──────────────┘     │
+├─────────────────────────────────────────┤
+│  checkpoint → disable → conversation    │
+│  → enable → cleanup → delete log        │
+└─────────────────────────────────────────┘
+```
+
+## What This Really Is
+
+This is not a UX toggle. It's a **memory governance primitive**.
+
+Like git: you branch, but you never merge back. The conversation exists in context, and the writes it would normally make to the agent's persistent state are intercepted instead. After the window closes, a normal read of the agent's memory and logs shows no trace of it — within the scope described in [Limitations](#limitations).
+
+> *"I want context… but I don't want consequences."*
+
+## Tested
+
+99 tests (97 pass, 2 xfail) including an adversarial suite:
+- ✅ Write blocking via `builtins.open` (modes `w`/`a`/`x`/`wb`/`r+`, symlinks resolved, binary)
+- ✅ Trigger detection (no false positive on "I'm so forgetful today", etc.)
+- ✅ Adapter error isolation (one failing adapter doesn't break others)
+- ✅ Exception safety (cleanup runs even if the conversation crashes)
+- ✅ Idempotency (double-start, stop-before-start, double-stop all safe)
+
+Known bypasses (writes that do **not** go through `builtins.open`, such as `Path.write_text`/`write_bytes` and `os.open`) are documented as [xfail tests](tests/test_adversarial.py) rather than hidden. See [Limitations](#limitations) below.
+
+## Threat Model
+
+**What forgetted blocks:** Writes that go through `builtins.open` to protected workspace paths (`memory/`, `DELIVERABLES.md`, `*.jsonl`), plus mem0 `add`/`update` when the Mem0Adapter is registered.
+
+**What forgetted does NOT block:** LLM API provider logs, network telemetry, OS-level forensics, and writes that bypass `builtins.open` (see [Limitations](#limitations)). It is a convenience layer for agent-controlled persistence, not a security or containment boundary.
+
+**What you can rely on, within that scope:** writes routed through `builtins.open` to protected paths are intercepted and return no-op handles, so a normal read of the agent's memory and logs afterward does not surface what happened inside the window. This is enforcement by effect (no-op handles + post-window cleanup), not a prompt instruction.
+
+## Limitations
+
+forgetted is a software convenience layer, not a security boundary. Grounded in the code and the [xfail test suite](tests/test_adversarial.py), it does **not**:
+
+- **Catch writes that bypass `builtins.open`.** `Path.write_text`, `Path.write_bytes`, `os.open`, C-extension writes, and subprocesses write directly and are not intercepted. These are documented as xfail tests.
+- **Erase data written before the window opened.** It governs writes during the window only; pre-existing memory is untouched.
+- **Block reads.** By design — the agent keeps full read context.
+- **Intercept writes outside the declared workspace path.**
+- **Block network calls, API calls, or external tool use.**
+- **Support concurrent or nested forgetted sessions on the same workspace** — overlapping windows can break the guard's restore chain (xfail tests).
+- **Defend against an adversary inspecting LLM-provider logs, network traffic, or raw disk forensics.**
+
+For the full machine-readable behavior contract, see [`INTENT.md`](INTENT.md).
+
+If forgetted is useful to you, please [star the repo](https://github.com/hermes-labs-ai/forgetted) — it helps others find it.
+
+## License
+
+[Apache-2.0](LICENSE) — Hermes Labs
+
+---
+
+## About Hermes Labs
+
+Hermes Labs is an independent AI-reliability lab building open-source tools that catch silent failure modes in production AI. More at [hermes-labs.ai](https://hermes-labs.ai).

{forgetted-0.2.0 → forgetted-0.2.2}/forgetted.egg-info/SOURCES.txt

@@ -1,3 +1,4 @@
+LICENSE
 README.md
 pyproject.toml
 forgetted/__init__.py

forgetted-0.2.2/forgetted.egg-info/requires.txt

@@ -0,0 +1,8 @@
+
+[dev]
+pytest>=8.4.2
+pytest-cov>=7.1.0
+ruff>=0.16.0
+
+[trash]
+send2trash>=2.1.0

{forgetted-0.2.0 → forgetted-0.2.2}/pyproject.toml

@@ -1,22 +1,21 @@
 [build-system]
-requires = ["setuptools>=68.0", "wheel"]
+requires = ["setuptools>=82.0.1", "wheel"]
 build-backend = "setuptools.build_meta"
 
 [project]
 name = "forgetted"
-version = "0.2.0"
-description = "Selective memory governance for AI agents — branch the timeline, never merge back"
+version = "0.2.2"
+description = "Selective memory governance for AI agents — branch the timeline, never merge back. By Hermes Labs."
 readme = "README.md"
 license = {text = "Apache-2.0"}
 requires-python = ">=3.9"
 authors = [
-    {name = "Hermes Labs", email = "lpcisystems@gmail.com"},
+    {name = "Hermes Labs", email = "roli@hermes-labs.ai"},
 ]
 keywords = ["llm", "agent", "memory", "privacy", "ai-safety", "fork", "selective-forget"]
 classifiers = [
     "Development Status :: 3 - Alpha",
     "Intended Audience :: Developers",
-    "License :: OSI Approved :: Apache Software License",
     "Programming Language :: Python :: 3",
     "Programming Language :: Python :: 3.9",
     "Programming Language :: Python :: 3.10",
@@ -28,17 +27,19 @@ classifiers = [
 dependencies = []
 
 [project.optional-dependencies]
-trash = ["send2trash>=1.8.0"]
+trash = ["send2trash>=2.1.0"]
 dev = [
-    "pytest>=7.0",
-    "pytest-cov>=4.0",
-    "ruff>=0.1.0",
+    "pytest>=8.4.2",
+    "pytest-cov>=7.1.0",
+    "ruff>=0.16.0",
 ]
 
 [project.urls]
-Homepage = "https://github.com/roli-lpci/forgetted"
-Repository = "https://github.com/roli-lpci/forgetted"
-Issues = "https://github.com/roli-lpci/forgetted/issues"
+Homepage = "https://hermes-labs.ai"
+Repository = "https://github.com/hermes-labs-ai/forgetted"
+Documentation = "https://github.com/hermes-labs-ai/forgetted#readme"
+Issues = "https://github.com/hermes-labs-ai/forgetted/issues"
+Changelog = "https://github.com/hermes-labs-ai/forgetted/blob/main/CHANGELOG.md"
 
 [tool.setuptools.packages.find]
 include = ["forgetted*"]

{forgetted-0.2.0 → forgetted-0.2.2}/tests/test_adapters.py

@@ -1,6 +1,7 @@
 """Tests for persistence adapters."""
 
 import shutil
+from datetime import datetime, timedelta, timezone
 from pathlib import Path
 from unittest.mock import MagicMock
 
@@ -133,6 +134,42 @@ class TestMem0Adapter:
         adapter.enable()
         adapter.cleanup()  # should not raise
 
+    def test_cleanup_deletes_new_timezone_aware_iso_memories_only(self):
+        from forgetted.adapters.mem0 import Mem0Adapter
+
+        boundary = datetime(2026, 7, 31, 12, 0, tzinfo=timezone.utc)
+        mock_memory = self._make_mock_memory()
+        mock_memory.get_all.return_value = {
+            "results": [
+                {"id": "old", "created_at": (boundary - timedelta(seconds=1)).isoformat()},
+                {"id": "new-offset", "created_at": (boundary + timedelta(seconds=1)).isoformat()},
+                {"id": "new-z", "created_at": "2026-07-31T12:00:02Z"},
+                {"id": "ambiguous", "created_at": "2026-07-31T12:00:03"},
+                {"id": "invalid", "created_at": "not-a-timestamp"},
+            ]
+        }
+        adapter = Mem0Adapter(mock_memory)
+        adapter._window_start = boundary.timestamp()
+
+        adapter.cleanup()
+
+        assert [call.args[0] for call in mock_memory.delete.call_args_list] == ["new-offset", "new-z"]
+
+    def test_cleanup_keeps_support_for_epoch_timestamps(self):
+        from forgetted.adapters.mem0 import Mem0Adapter
+
+        mock_memory = self._make_mock_memory()
+        mock_memory.get_all.return_value = [
+            {"id": "old", "created_at": 99.0},
+            {"id": "new", "created_at": 101.0},
+        ]
+        adapter = Mem0Adapter(mock_memory)
+        adapter._window_start = 100.0
+
+        adapter.cleanup()
+
+        mock_memory.delete.assert_called_once_with("new")
+
     def test_idempotent_disable(self):
         from forgetted.adapters.mem0 import Mem0Adapter
 

forgetted-0.2.0/README.md

@@ -1,190 +0,0 @@
-<p align="center">
-  <h1 align="center">🫥 forgetted</h1>
-  <p align="center"><strong>Your AI agent remembers everything. Now it doesn't have to.</strong></p>
-  <p align="center">
-    <a href="https://pypi.org/project/forgetted/"><img src="https://img.shields.io/pypi/v/forgetted?color=blue" alt="PyPI"></a>
-    <a href="https://github.com/roli-lpci/forgetted/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-Apache--2.0-green" alt="License"></a>
-    <a href="https://www.python.org/downloads/"><img src="https://img.shields.io/badge/python-3.9+-blue" alt="Python"></a>
-  </p>
-</p>
-
----
-
-**forgetted** gives AI agents selective memory governance. One line of code, and your agent keeps full context but writes nothing to memory.
-
-> Traditional incognito is dumb: no past, no future, fully isolated.
-> **forgetted** gives you: full continuity + selective non-persistence.
-
-```python
-from forgetted import ForgetSession
-
-with ForgetSession("/path/to/workspace"):
-    agent.chat("this conversation never happened")
-# ↑ No trace in memory, logs, or vector DB. Agent resumes normally.
-```
-
-## Why?
-
-AI agents write everything: memory files, session logs, vector embeddings, deliverables. Sometimes you need context without consequences:
-
-- 💬 **Sensitive conversations** that shouldn't persist in agent memory
-- 🧪 **Experiments** you don't want polluting your agent's knowledge base
-- 🔒 **Client data** discussed but not stored
-- 🤔 **Brainstorming** that shouldn't bias future responses
-
-**forgetted** is not a prompt. It's software that wraps the agent's persistence layer — writes silently vanish, reads still work, and the agent resumes normally after.
-
-## Install
-
-```bash
-pip install forgetted
-```
-
-## Quick Start
-
-### Simple (file-level protection)
-
-```python
-from forgetted import ForgetSession
-
-# Everything inside is forgetted — writes to memory/, logs, deliverables vanish
-with ForgetSession("/path/to/agent/workspace"):
-    agent.chat("tell me about the secret project")
-```
-
-### With vector DB protection
-
-```python
-from forgetted import ForgetSession
-from forgetted.adapters.mem0 import Mem0Adapter
-
-session = ForgetSession(
-    workspace="/path/to/workspace",
-    adapters=[Mem0Adapter(memory_instance, user_id="roli")],
-)
-session.start(checkpoint_summary="Discussing API design")
-# ... conversation happens with full context, zero persistence ...
-session.stop()  # re-enables all layers, cleans up
-```
-
-### Trigger detection (for chat agents)
-
-```python
-from forgetted import is_forget_trigger, ForgetSession
-
-if is_forget_trigger(user_message):  # "/forget", "off the record", etc.
-    with ForgetSession(workspace):
-        handle_conversation()
-```
-
-## What Gets Blocked
-
-| Layer | How | Status |
-|---|---|---|
-| Memory files (`memory/*.md`) | `builtins.open` patch | ✅ Blocked |
-| Deliverables / audit logs | `builtins.open` patch | ✅ Blocked |
-| Session logs (`*.jsonl`) | Blocked + deleted on exit | ✅ Blocked |
-| mem0 / semantic memory | Method patch on `add`/`update` | ✅ Blocked |
-| Any custom persistence | Write your own adapter | 🔌 Extensible |
-
-## How It Works
-
-**forgetted** uses a layered defense:
-
-1. **`FileWriteAdapter`** (always on) — patches `builtins.open` to intercept writes to protected paths. Returns no-op file handles instead of raising — agent code doesn't crash, writes just vanish.
-
-2. **`Mem0Adapter`** (opt-in) — patches `memory.add()` and `memory.update()` during the window. Post-window cleanup deletes any memories that leaked through.
-
-3. **`ForgetSession`** orchestrates everything: checkpoint → disable adapters → run conversation → enable adapters → cleanup → delete session log.
-
-Reads are **never** blocked. The agent has full context — it just can't write new context.
-
-## Write Your Own Adapter
-
-Any persistence layer can be controlled:
-
-```python
-from forgetted.adapters.base import PersistenceAdapter
-
-class RedisAdapter(PersistenceAdapter):
-    name = "redis"
-
-    def disable(self):
-        self._client.config_set("save", "")
-        self._active = True
-
-    def enable(self):
-        self._client.config_set("save", "3600 1")
-        self._active = False
-
-    def cleanup(self):
-        for key in self._window_keys:
-            self._client.delete(key)
-
-    @property
-    def is_active(self): return self._active
-```
-
-Register it: `ForgetSession(workspace, adapters=[RedisAdapter(client)])`
-
-## Trigger Phrases
-
-Built-in detection for natural-language triggers:
-
-| Trigger | Example |
-|---|---|
-| `/forgetted` | "/forgetted" |
-| `/forget` | "/forget" |
-| `forget this` | "hey, forget this conversation" |
-| `off the record` | "let's go off the record" |
-| `forgetted mode` | "enable forgetted mode" |
-| `don't remember this` | "don't remember this" |
-
-## Architecture
-
-```
-┌─────────────────────────────────────────┐
-│           ForgetSession                  │
-│  (orchestrator — context manager)        │
-├─────────────────────────────────────────┤
-│  ┌──────────────┐  ┌──────────────┐     │
-│  │ FileWrite    │  │ Mem0         │     │
-│  │ Adapter      │  │ Adapter      │ ... │
-│  │ (safety net) │  │ (opt-in)     │     │
-│  └──────────────┘  └──────────────┘     │
-├─────────────────────────────────────────┤
-│  checkpoint → disable → conversation    │
-│  → enable → cleanup → delete log        │
-└─────────────────────────────────────────┘
-```
-
-## What This Really Is
-
-This is not a UX toggle. It's a **memory governance primitive**.
-
-Like git: you branch, but you never merge back. The conversation exists in context but is never written to the agent's persistent state. After the window closes, it's as if it never happened.
-
-> *"I want context… but I don't want consequences."*
-
-## Tested
-
-97 tests including an adversarial suite:
-- ✅ Write blocking (open w/a/x/wb/r+, symlinks, binary)
-- ✅ Trigger detection (zero false positives on "forgot password", "forgetful", etc.)
-- ✅ Adapter error isolation (one failing adapter doesn't break others)
-- ✅ Exception safety (cleanup runs even if conversation crashes)
-- ✅ Idempotency (double-start, stop-before-start, double-stop all safe)
-
-Known limitations are [documented as xfail tests](tests/test_adversarial.py) — not hidden.
-
-## Threat Model
-
-**What forgetted blocks:** Everything the agent controls — memory files, vector DB writes, session logs, deliverables.
-
-**What forgetted does NOT block:** LLM API provider logs, network telemetry, OS-level forensics. That's not the point.
-
-**The guarantee:** *"If someone looks through the agent's memory and logs, they won't find what you forgetted."*
-
-## License
-
-[Apache-2.0](LICENSE) — Hermes Labs

forgetted-0.2.0/forgetted.egg-info/requires.txt

@@ -1,8 +0,0 @@
-
-[dev]
-pytest>=7.0
-pytest-cov>=4.0
-ruff>=0.1.0
-
-[trash]
-send2trash>=1.8.0