[ajianaz]

What

Closes the gaps listed in the 2b-1 CHANGELOG entry. The privacy filter now also covers the tags, every string inside the metadata and the source on remember, remember_with_contradiction, room remember, update, import, set_source and room consolidation (ConsolidationStore::insert_memory); counts are merged into redactions and strict mode refuses the write (the HTTP and CLI source is checked before anything is stored). New update_memory_detailed returns an UpdateOutcome (what was masked); update_memory keeps its signature. PUT /memory returns redacted and uteke_update over MCP says when it masked something. Importing a structural export (export --full) restores a backup as it was and is deliberately not filtered; this is documented.

Why

Part of #1464: a secret in a tag, a metadata string or a source would otherwise still be persisted and indexed. Refs #1464.

Testing

• clippy -D warnings, fmt, cargo test --workspace and cargo run -p docgen (no diff) pass
• new tests: 6 in privacy_field_tests.rs (tags and metadata on remember, strict, update, source, import), 1 consolidation, 1 server (PUT redacted, strict source and metadata) and 1 MCP (masked update)
• reviewed locally with the Cora MCP agent reviewer before opening

[github-actions]

🔍 Cora AI Code Review

✅ No issues found. Code looks good!

---

Review powered by cora-code · BYOK · MIT