pycontextdb 0.2.0__tar.gz → 0.3.2__tar.gz

pycontextdb-0.3.2/.github/CODEOWNERS

@@ -0,0 +1,14 @@
+# Maintainer review on the SDK and on anything that could ship a bad
+# PyPI artifact.
+# Username: https://github.com/gaufire
+
+* @gaufire
+
+/.github/ @gaufire
+/legal/ @gaufire
+/scripts/ @gaufire
+/NOTICE @gaufire
+/LICENSE @gaufire
+/CONTRIBUTING.md @gaufire
+/pyproject.toml @gaufire
+/contextdb/ @gaufire

pycontextdb-0.3.2/.github/pull_request_template.md

@@ -0,0 +1,28 @@
+## Summary
+
+<!-- What changed, and why. Evals win over prose. -->
+
+## Open-core classification
+
+Select exactly one and justify placement against `OPEN_CORE.md`.
+
+- [ ] No capability change — docs/tests/build/maintenance only.
+- [ ] Semantic — portable offline correctness.
+- [ ] Contract — interface/schema/protocol.
+- [ ] Reference — minimal single-node implementation.
+- [ ] Operated — multi-tenant/process/region/people/SLA coordination; this PR
+      does not belong in the public SDK.
+
+**Why this repository is the correct side of the boundary:**
+
+<!-- For mixed features, identify the open contract and private implementation. -->
+
+## Checklist
+
+- [ ] `pytest tests/evals/ -v` passes, or I explain why not.
+- [ ] `python scripts/check_open_core_boundary.py` passes.
+- [ ] `contextdb.init`, `factual.add`, `factual.recall`, and `search` keep working; new fields have backward-compatible defaults.
+- [ ] No new runtime dependency without a discussion first.
+- [ ] No hosted auth, entitlements, billing, control-plane, enterprise,
+      deployment, migration-orchestration, or fleet code entered the SDK.
+- [ ] Substantial contribution: I agree to the CLA in CONTRIBUTING.md (legal name and email in this description). Trivial typo PRs may skip this.

{pycontextdb-0.2.0 → pycontextdb-0.3.2}/.github/workflows/ci.yml

@@ -54,6 +54,12 @@ jobs:
           python -m pip install --upgrade pip
           pip install -e ".[dev]"
 
+      - name: Open-core boundary
+        run: python scripts/check_open_core_boundary.py
+        env:
+          CONTEXTDB_REQUIRE_PR_CLASSIFICATION: ${{ github.event_name == 'pull_request' }}
+          CONTEXTDB_PR_BODY: ${{ github.event.pull_request.body }}
+
       - name: Lint with ruff
         run: ruff check .
 
@@ -63,16 +69,41 @@ jobs:
       - name: Run tests
         run: pytest
 
-  open-core:
-    name: Open-core boundary
+  postgres:
+    name: Postgres integration
     runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: postgres:16
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: postgres
+          POSTGRES_DB: postgres
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U postgres"
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 10
+    env:
+      CONTEXTDB_TEST_POSTGRES_URL: postgresql://postgres:postgres@127.0.0.1:5432/postgres
     steps:
       - uses: actions/checkout@v4
 
-      - name: Set up Python
-        uses: actions/setup-python@v5
+      - uses: actions/setup-python@v5
         with:
           python-version: "3.12"
+          cache: pip
 
-      - name: Package-boundary and accidental-publication checks
-        run: python scripts/check_open_core.py
+      - name: Install package with Postgres support
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e ".[dev,postgres]"
+
+      - name: Run real Postgres tests
+        run: |
+          pytest \
+            tests/unit/test_postgres_concurrency.py \
+            tests/unit/test_scoped_id_access.py \
+            tests/unit/test_vector_scope.py

{pycontextdb-0.2.0 → pycontextdb-0.3.2}/.github/workflows/publish.yml

@@ -25,9 +25,9 @@ jobs:
       - name: Build sdist and wheel
         run: python -m build
 
-      - name: Open-core and accidental-publication inspection
+      - name: Release-safety inspection
         run: |
-          python scripts/check_open_core.py --dist dist --release-tag "${{ github.event.release.tag_name }}"
+          python scripts/check_release.py --dist dist --release-tag "${{ github.event.release.tag_name }}"
 
       - name: Upload dist artifacts
         uses: actions/upload-artifact@v4
@@ -42,7 +42,7 @@ jobs:
 
     # Trusted-publisher flow: PyPI verifies this workflow via OIDC.
     # Require reviewers on this GitHub Environment so a published tag
-    # cannot reach PyPI without a human (OPEN_CORE.md).
+    # cannot reach PyPI without a human.
     environment:
       name: pypi
       url: https://pypi.org/project/pycontextdb/

{pycontextdb-0.2.0 → pycontextdb-0.3.2}/.pre-commit-config.yaml

@@ -8,7 +8,7 @@
 
 repos:
   # Secret scanning — the reason this file exists. Gitleaks scans the
-  # staged diff for tokens (PyPI, GitHub, AWS, Stripe, Slack, generic
+  # staged diff for tokens (PyPI, GitHub, AWS, Slack, generic
   # entropy-high strings, ...). First run auto-downloads the binary.
   - repo: https://github.com/gitleaks/gitleaks
     rev: v8.30.0

pycontextdb-0.3.2/CHANGELOG.md

@@ -0,0 +1,146 @@
+# Changelog
+
+## Unreleased
+
+## 0.3.2 — 2026-08-20
+
+### Added
+
+- Host-owned asyncpg pools and embedding providers can be shared safely across
+  project runtimes without being closed on runtime eviction.
+- Mutations return project-scoped memory versions and Postgres WAL positions;
+  reads can require those floors and fail closed when unavailable.
+- Embeddings carry model identity and distinct query/document roles, including
+  role-aware OpenAI-compatible transport.
+- Project-scoped vector and immutable item caches remove redundant warm recall
+  queries while preserving user isolation and cross-worker coherence.
+- A durable read-audit hook lets hosted runtimes persist exact PII-processed
+  recall evidence outside the synchronous SDK audit chain.
+- The open-core constitution, PR classification, CI source scanner, and release
+  gate prevent operated Cloud capabilities from entering the Apache package.
+
+### Fixed
+
+- Memory mutation, project/global revision changes, and write audit now commit
+  in one Postgres transaction.
+- Advisory locks execute their protected work on the same transaction-bound
+  connection instead of accidentally hopping pool connections.
+- Public commercial-use guidance now matches Apache-2.0 while preserving
+  ContextDB trademark controls.
+
+`contextdb.init`, `factual.add`, `factual.recall`, and `search` remain
+backward-compatible. All new host-sharing and consistency arguments are
+optional.
+
+## 0.3.1 — 2026-08-18
+
+### Fixed
+
+- README links to docs/COMMERCIAL.md/CONTRIBUTING.md are absolute GitHub
+  URLs — relative targets 404 on the PyPI project page.
+- `scripts/check_release.py` now scans the built package description for
+  relative Markdown links so this fails in CI before it reaches PyPI.
+
+## 0.3.0 — 2026-08-18
+
+Host API scope hardening:
+
+- Every non-health HTTP route now runs the configured authentication,
+  including `/v1/trust_policy` and `/mcp`.
+- An authenticated `user_id` (from `auth_hook`) can no longer be
+  overridden by the JSON body, `X-ContextDB-User` header, query string,
+  or MCP tool arguments; a conflict is a clear 400 (`ScopeConflictError`)
+  instead of a silent pick.
+- `/mcp` propagates the authenticated scope into every tool call.
+- ID-based `confirm` / `forget` verify the target belongs to the resolved
+  user scope; a foreign `memory_id` raises `MemoryNotFoundError`,
+  indistinguishable from a missing one. Same guarantee on SQLite and
+  Postgres stores.
+- Anonymous loopback serving is unchanged and documented as *not* an
+  authorization boundary.
+
+Decision-layer and PII correctness:
+
+- `VerifyBeforeAct.decide()` / `confirm_pending()` accept an additive
+  per-call `user_id=` for shared clients; a scoped client still rejects a
+  foreign one.
+- SEARCH and DECIDE audit entries now persist only the PII-processed form
+  of the query — the append-only chain must never hold raw PII.
+- `pii_action="encrypt"` fails closed: without a key, `PIIDetector`
+  raises `ConfigError` instead of degrading to redact, and encryption
+  mode can never persist plaintext annotation originals.
+
+Postgres and audit concurrency:
+
+- Vector candidates are scoped by SQL *before* ranking — a large foreign
+  scope can no longer starve an in-scope hit out of the candidate budget.
+- The process-local vector index tracks a global store revision; a write
+  from another instance or process forces a rebuild before the next
+  search (stale reads are no longer served indefinitely).
+- Slot operations on Postgres serialize across processes via a
+  transaction-scoped advisory lock; audit-chain appends serialize
+  in-process (SQLite) and cross-process (Postgres), so the hash chain
+  cannot fork.
+- Real Postgres concurrent-worker tests cover corroboration, slot
+  supersede, audit-chain integrity, and cross-worker recall
+  (`CONTEXTDB_TEST_POSTGRES_URL`).
+
+Host-adoption work:
+
+- `contextdb serve --http` (`pycontextdb[serve]`) — JSON API + `/mcp`, Bearer token, `auth_hook`.
+- Per-call `user_id=` on add/recall/confirm/forget. Shared `init()` is the multi-tenant path; `ContextDBPool` is LRU if you still need one client per user.
+- OSS `PostgresStore` for `postgresql://` URLs (`pycontextdb[postgres]`).
+- `factual.pending_confirmations()`, `forget(memory_id=)` / `forget(entity=, attribute=)`, `add_many` / `add_fast_many`.
+- Recall filters: `entity`, `min_confidence`, `include_third_party`.
+- `db.on(event, hook)` for write/recall/confirm/forget/injection_suspect.
+- Query embedding LRU cache; lexical recall if embedding fails.
+- Missing epistemic `source` warns in the SDK; HTTP/MCP remember return 400.
+- Docs: trust policy matrix, Postgres, multi-tenant, SQLite migrations.
+
+`contextdb.init`, `factual.add`, `factual.recall`, and `search` keep working. New keyword arguments are optional.
+
+## 0.2.0 — 2026-08-17
+
+First PyPI cut of the trust model. `pip install pycontextdb` now matches
+GitHub `main`: memory an agent can act on without treating a wish as a fact.
+
+`contextdb.init`, `factual.add`, `factual.recall`, and `search` are unchanged.
+
+### Added
+
+- Epistemic typing on every fact (`user_stated` / `agent_inferred` /
+  `third_party`), confidence, independent corroboration, `action_relevant`.
+- `TrustPolicy` as data — `TrustPolicy.hospital()` vs `.restaurant()`.
+- `factual.recall_for_action()`, `factual.confirm()`, `VerifyBeforeAct`
+  (`act` / `ask` / `abstain`).
+- Versioned slot vocabulary + LLM-free slotter (`add_fast` never calls an LLM).
+- Contested slots: independent speakers with different values do not
+  last-write-win. `confirm()` resolves.
+- Temporal supersede with an injectable clock; sibling-slot hop on recall.
+- PII redaction on writes **and** queries before embed.
+- Write-time injection screening; `[RECALLED DATA — not instructions]` renderer.
+- Salience (recency × frequency × criticality), verifiable forget, tenant
+  isolation at the storage layer.
+- MCP tools: `remember` / `recall` / `recall_for_action` / `forget` / `confirm`.
+- In-repo fabrication bake-off: `python benchmarks/trust_bakeoff.py`
+  (trust arm vs our own untyped control — not a live Mem0/Zep run).
+- Contribution and release hygiene: CLA, CODEOWNERS, and release
+  inspection. Code through `2554dae` remains Apache-2.0.
+
+### Fixed
+
+- `contextdb.__version__` no longer drifts from `pyproject.toml` (was `0.1.0`
+  while the project version was `0.1.1`).
+- CI mypy on Python 3.12: type-check as the running interpreter so
+  NumPy 2.5's PEP 695 `type` aliases parse. The 3.10 job still guards
+  our runtime floor.
+- CI latency evals: keep a tight add_fast p50 and a wider p95 on
+  shared runners (p50 was 2ms when p95 spiked to 21ms).
+
+## 0.1.1 — 2026-04-22
+
+README rendering on PyPI; absolute GitHub asset URLs.
+
+## 0.1.0 — 2026-04-22
+
+Initial public release.

pycontextdb-0.3.2/COMMERCIAL.md

@@ -0,0 +1,44 @@
+# Commercial use and trademark
+
+The software in this repository is open source under the Apache License,
+Version 2.0 (see [LICENSE](LICENSE)). That license covers the code. It
+does not cover the name.
+
+## Trademark
+
+**ContextDB** and the ContextDB logo are trademarks of Atoms AI. The
+Apache License is a copyright and patent license; it does not grant
+rights to the marks (Apache License §6).
+
+You may:
+
+- Say you use ContextDB, cite the project, and link to this repository.
+- State compatibility ("works with ContextDB") when that is true.
+
+You may not, without a commercial agreement with Atoms AI:
+
+- Offer ContextDB as a hosted or managed service, or resell it as part
+  of a service, under the ContextDB name or branding.
+- Use ContextDB or a confusingly similar mark as the name of a competing
+  product, hosted service, or company.
+- Use the logo or word mark to imply endorsement by Atoms AI.
+- Register domains, social handles, or trademarks that trade on the mark.
+
+## Resale and commercial agreements
+
+Apache-2.0 permits commercial use, modification, redistribution, embedding,
+and hosted use of the code, subject to its terms. No separate copyright
+license is required for those uses.
+
+If your company wants to use the ContextDB name or logo for a hosted offering,
+or wants a supported OEM arrangement, Cloud service, support, or a trademark
+agreement, contact **contextdb@atomsai.com**.
+
+## Attribution (optional)
+
+Apache-2.0 does not require a public credit line. If you ship a product
+that uses ContextDB and want to credit the project, the preferred form
+is a visible **Built with ContextDB** link to
+https://github.com/atomsai/contextdb — a courtesy, not a license
+condition. Redistributors must still keep `LICENSE` and `NOTICE` as
+Apache requires.

{pycontextdb-0.2.0 → pycontextdb-0.3.2}/CONTRIBUTING.md

@@ -1,31 +1,36 @@
 # Contributing to ContextDB
 
 Thank you for wanting to improve ContextDB. This repository is the
-**open-core SDK**. Read [OPEN_CORE.md](OPEN_CORE.md) before you write
-code. If the change belongs in hosted multi-tenant operations, it does
-not belong here.
+Apache-2.0 ContextDB SDK: everything here works offline, with no feature
+gates.
 
 ## What we accept here
 
 Trust and safety correctness, local runtime fixes, adapters, docs, and
-evals. Evals win over prose: `pytest tests/evals/ -v`.
+evals. Portable contracts and minimal single-node reference implementations
+also belong here. Classify every substantial change under
+[OPEN_CORE.md](OPEN_CORE.md). Evals win over prose:
+`pytest tests/evals/ -v`.
 
 We do **not** accept:
 
-- Cloud control-plane, billing, SSO, or entitlement code
-- Local license keys or `if paid:` branches
-- Imports of `contextdb_cloud` or any private cloud package
+- Feature gates of any kind — no license keys, no `if paid:` branches,
+  no flags that only work against a hosted service
+- Imports of packages outside the declared dependencies
 - Changes that loosen PII-before-embed or the hash-chained audit log
+- Hosted auth, tenancy, entitlements, billing, organization control-plane,
+  enterprise governance, managed-service, deployment, migration-orchestration,
+  or fleet code
 
 ## Contributor License Agreement
 
 Trivial changes (typos, broken links, comment nits) do not need a CLA.
 
 **Substantial contributions** (new or material code, evals, or docs that
-are not typo-fixes) require a signed CLA **before** merge. The CLA lets
-Atoms AI relicense *future* contributions if dual-licensing ever
-matters. It does not change the Apache-2.0 grant on code already
-public through `2554dae`.
+are not typo-fixes) require a signed CLA **before** merge. The CLA grants
+the project broad rights to distribute your contribution, including under
+different license terms; code already released under Apache-2.0 stays
+Apache-2.0.
 
 1. Read [legal/CLA-individual.md](legal/CLA-individual.md) (or
    [legal/CLA-entity.md](legal/CLA-entity.md) if you contribute on
@@ -50,7 +55,6 @@ pre-commit install
 ruff check .
 mypy contextdb --strict
 pytest
-python scripts/check_open_core.py
 ```
 
 Do not break `contextdb.init`, `factual.add`, `factual.recall`, or
@@ -58,9 +62,8 @@ Do not break `contextdb.init`, `factual.add`, `factual.recall`, or
 
 ## Review
 
-[`.github/CODEOWNERS`](.github/CODEOWNERS) routes reviews. Governance
-files (`OPEN_CORE.md`, `COMMERCIAL.md`, `LICENSE`, `legal/`, workflows)
-need a maintainer.
+[`.github/CODEOWNERS`](.github/CODEOWNERS) routes reviews. `LICENSE`,
+`NOTICE`, `legal/`, and the workflows need a maintainer.
 
 ## License of your contribution
 

{pycontextdb-0.2.0 → pycontextdb-0.3.2}/NOTICE

@@ -6,4 +6,5 @@ Licensed under the Apache License, Version 2.0. See LICENSE.
 
 ContextDB and the ContextDB logo are trademarks of Atoms AI.
 The Apache License does not grant permission to use the ContextDB
-trademarks. See COMMERCIAL.md.
+trademarks. For trademark and commercial licensing (including resale
+or hosted services), contact contextdb@atomsai.com. See COMMERCIAL.md.

pycontextdb-0.3.2/OPEN_CORE.md

@@ -0,0 +1,80 @@
+# ContextDB open-core constitution
+
+**Status: binding for all future work.** Changes require an explicit
+architecture decision and maintainer approval.
+
+> Open the single-node semantics and reference engine. Keep multi-tenant coordination, operated guarantees, governance, and proof private.
+
+This repository is the public Apache-2.0 engine. It must remain complete,
+useful offline, inspectable, and safe without a hosted account, license key,
+paid flag, time bomb, or phone-home.
+
+Existing Apache grants are permanent. New code is reviewed prospectively
+against this constitution before merge and again before package publication.
+
+## Four change classes
+
+Every capability-changing contribution is classified as exactly one:
+
+1. **Semantic** — portable correctness required offline: open implementation.
+2. **Contract** — interface, schema, protocol, or compatibility test: open.
+3. **Reference** — minimal single-node implementation proving a contract: open.
+4. **Operated** — coordinates tenants, processes, regions, people, or an SLA:
+   private Cloud implementation, not this repository.
+
+Docs, tests, and maintenance with no capability change declare that explicitly.
+Mixed features are split. This repository may contain the contract and minimal
+reference implementation. Distributed schedulers, controllers, managed
+workers, deployment topology, and operations stay private.
+
+## What belongs here
+
+- Memory and epistemic data models.
+- `TrustPolicy`, act/ask/abstain, confirmation, and local explanation.
+- PII-before-embed, injection defenses, and public adversarial evals.
+- Local CRUD, SQLite, and a basic Postgres reference adapter.
+- Atomic mutation/version/audit behavior required for correct storage.
+- Deletion semantics and local verification.
+- Portable consistency-token, embedding-provider, and connector contracts.
+- Minimal reference implementations and compatibility tests.
+
+Safety and correctness are never commercially gated or intentionally weaker
+than the hosted service.
+
+## What does not belong here
+
+- Hosted gateway, tenancy, API-key auth, entitlements, quotas, billing, or
+  abuse controls.
+- Organization/project/team control plane or governance console.
+- Multi-worker routing, replica orchestration, failover, autoscaling, backups,
+  incidents, or availability guarantees.
+- Managed model fleet, batching service, backfill control, or deployment code.
+- Managed connector sync, checkpoints, retries, observability, or support SLAs.
+- Organization Action Ledger, signed compliance exports, or retention service.
+- Policy rollout/canary/approval controllers.
+- SSO, SCIM, KMS/BYOK, private networking, residency, or contractual controls.
+
+Thin generated Cloud clients, public API schemas, connector interfaces, and
+common community adapters are public distribution artifacts because they grow
+the ecosystem; they may live in separate public packages and contain no hosted
+implementation.
+
+## Contribution and release gate
+
+- Pull requests declare one change class and justify repository placement.
+- Ambiguous changes stop for boundary review; publication is never the default.
+- Contract tests may be shared; private implementations are not copied here.
+- Every PyPI release receives an open-core diff review.
+- `scripts/check_open_core_boundary.py` and CI enforce mechanical invariants.
+
+Private code can be opened later. An Apache grant cannot be clawed back.
+
+## Commercial model
+
+ContextDB Cloud sells operation, coordination, governance, and proof of this
+open correctness model. The SDK is not a crippled free tier. If Cloud cannot
+win while this engine is useful, Cloud must become stronger rather than making
+the SDK weaker.
+
+See [COMMERCIAL.md](COMMERCIAL.md) for trademark rules. Apache-2.0 permits
+commercial use of the code; it does not grant rights to ContextDB trademarks.

{pycontextdb-0.2.0 → pycontextdb-0.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: pycontextdb
-Version: 0.2.0
+Version: 0.3.2
 Summary: The unified context layer for AI agents — memory you can act on without treating wishes as facts
 Project-URL: Homepage, https://github.com/atomsai/contextdb
 Project-URL: Documentation, https://contextdb.dev
@@ -33,7 +33,10 @@ Requires-Dist: neo4j>=5.0; extra == 'all'
 Requires-Dist: pgvector>=0.2; extra == 'all'
 Requires-Dist: redis>=5.0; extra == 'all'
 Requires-Dist: sentence-transformers>=2.0; extra == 'all'
+Requires-Dist: starlette>=0.37; extra == 'all'
+Requires-Dist: uvicorn>=0.27; extra == 'all'
 Provides-Extra: dev
+Requires-Dist: httpx>=0.27; extra == 'dev'
 Requires-Dist: hypothesis>=6.0; extra == 'dev'
 Requires-Dist: mypy>=1.8; extra == 'dev'
 Requires-Dist: pre-commit>=3.0; extra == 'dev'
@@ -41,6 +44,7 @@ Requires-Dist: pytest-asyncio>=0.21; extra == 'dev'
 Requires-Dist: pytest-cov>=4.0; extra == 'dev'
 Requires-Dist: pytest>=7.0; extra == 'dev'
 Requires-Dist: ruff>=0.4; extra == 'dev'
+Requires-Dist: starlette>=0.37; extra == 'dev'
 Provides-Extra: faiss
 Requires-Dist: faiss-cpu>=1.7; extra == 'faiss'
 Provides-Extra: local
@@ -55,6 +59,9 @@ Requires-Dist: redis>=5.0; extra == 'redis'
 Provides-Extra: rl
 Requires-Dist: torch>=2.0; extra == 'rl'
 Requires-Dist: trl>=0.7; extra == 'rl'
+Provides-Extra: serve
+Requires-Dist: starlette>=0.37; extra == 'serve'
+Requires-Dist: uvicorn>=0.27; extra == 'serve'
 Description-Content-Type: text/markdown
 
 <p align="center">
@@ -67,7 +74,7 @@ Description-Content-Type: text/markdown
 <p align="center">
   <a href="https://pypi.org/project/pycontextdb/"><img src="https://img.shields.io/pypi/v/pycontextdb.svg" alt="PyPI version"></a>
   <a href="https://github.com/atomsai/contextdb/blob/main/LICENSE"><img src="https://img.shields.io/badge/License-Apache%202.0-blue.svg" alt="License: Apache 2.0"></a>
-  <a href="https://github.com/atomsai/contextdb/blob/main/tests/"><img src="https://img.shields.io/badge/tests-122%20passing-brightgreen.svg" alt="Tests"></a>
+  <a href="https://github.com/atomsai/contextdb/blob/main/tests/"><img src="https://img.shields.io/badge/tests-139%20passing-brightgreen.svg" alt="Tests"></a>
   <a href="https://www.python.org/downloads/"><img src="https://img.shields.io/badge/python-3.10%2B-blue.svg" alt="Python 3.10+"></a>
   <a href="https://github.com/atomsai/contextdb/blob/main/pyproject.toml"><img src="https://img.shields.io/badge/mypy-strict-blue.svg" alt="Type Checked"></a>
   <a href="https://github.com/atomsai/contextdb/blob/main/benchmarks/run_benchmarks.py"><img src="https://img.shields.io/badge/search_p95-%3C5ms_%40_5K-brightgreen.svg" alt="Search p95"></a>
@@ -95,9 +102,14 @@ Description-Content-Type: text/markdown
 | **Search latency (5K memories)** | p50 **3.9ms** · p95 **5.0ms** |
 | **Vector search (10K × 1,536d)** | p50 **0.8ms** · p95 **1.0ms** |
 | **PII detection** | 100,000+ texts/sec |
-| **Tests** | 122 passing (incl. 34 trust-model acceptance evals) · ruff clean · mypy `--strict` clean |
+| **Tests** | 139 passing (incl. 34 trust-model acceptance evals) · ruff clean · mypy `--strict` clean |
 | **Dependencies** | SQLite + NumPy (FAISS / Postgres optional) |
 
+Those search numbers are **SQLite + the in-repo mock embedder**. A recall
+that embeds the query with OpenAI is typically **100–300ms** before the
+store is touched. Use `embedding_cache_size`, `pip install 'pycontextdb[local]'`,
+or `lexical_on_embed_failure` when the voice turn budget cannot wait.
+
 Hermetic, reproducible — run the suite yourself: `python benchmarks/run_benchmarks.py`.
 
 ---
@@ -549,7 +561,7 @@ Numbers above are from a MacBook-class laptop with no FAISS. Rerun `python bench
 
 ## Why not just use...
 
-**Mem0?** Their graph intelligence is a commercial add-on. ContextDB ships experiential memory, working-memory paging, and the trust bar in the Apache SDK — hosted multi-tenant operations are a separate Cloud product ([OPEN_CORE.md](OPEN_CORE.md)).
+**Mem0?** Their graph intelligence is a commercial add-on. ContextDB ships experiential memory, working-memory paging, and the trust bar in the Apache SDK.
 
 **Zep?** Strong bitemporal knowledge graphs. But no experiential memory, no working memory paging, no learned retrieval policies. Scope is narrower than a full memory OS.
 
@@ -588,19 +600,44 @@ Python 3.10+. No system dependencies for the default install — SQLite and NumP
 
 ---
 
-## Open core
+## HTTP and multi-tenant hosts
+
+```bash
+pip install 'pycontextdb[serve]'
+contextdb serve --http --port 8080 --token "$CONTEXTDB_SERVE_TOKEN"
+```
+
+One process, many users: `init()` without `user_id`, then pass `user_id=`
+on each call (or `X-ContextDB-User` on HTTP). Postgres:
+
+```bash
+pip install 'pycontextdb[postgres]'
+```
+
+```python
+db = contextdb.init(storage_url="postgresql://...")
+```
+
+See [docs/serve.md](https://github.com/atomsai/contextdb/blob/main/docs/serve.md), [docs/multi_tenant.md](https://github.com/atomsai/contextdb/blob/main/docs/multi_tenant.md),
+and [docs/trust_policy.md](https://github.com/atomsai/contextdb/blob/main/docs/trust_policy.md).
+
+## License and attribution
 
-The SDK, trust model, and evals are Apache-2.0. Hosted multi-tenant
-operations live in a private `contextdb-cloud` repo that depends on this
-package — this package never depends on cloud. Entitlements are
-server-side. See [OPEN_CORE.md](OPEN_CORE.md) and
-[COMMERCIAL.md](COMMERCIAL.md). **ContextDB** is a trademark; the Apache
-license is not a trademark license.
+The SDK, trust model, and evals are Apache-2.0 — everything described in
+this README ships in this tree, with no feature gates. **ContextDB** is a
+trademark; the Apache license is not a trademark license. Reselling
+ContextDB as a service, or as part of one, under the ContextDB name or
+branding requires a commercial agreement with Atoms AI — contact
+contextdb@atomsai.com (see [COMMERCIAL.md](https://github.com/atomsai/contextdb/blob/main/COMMERCIAL.md)).
+The binding product boundary is documented in
+[OPEN_CORE.md](https://github.com/atomsai/contextdb/blob/main/OPEN_CORE.md). A public
+credit line is optional — if you want one, use **Built with ContextDB**
+linking to this repository.
 
 ## Contributing
 
 Apache 2.0 — see [LICENSE](https://github.com/atomsai/contextdb/blob/main/LICENSE).
-Substantial PRs need a CLA ([CONTRIBUTING.md](CONTRIBUTING.md)).
+Substantial PRs need a CLA ([CONTRIBUTING.md](https://github.com/atomsai/contextdb/blob/main/CONTRIBUTING.md)).
 See [`docs/architecture.md`](https://github.com/atomsai/contextdb/blob/main/docs/architecture.md) for the design rationale. Issues and pull requests welcome on [GitHub](https://github.com/atomsai/contextdb).
 
 **Local setup:**