Governance Season: An Open-Source Retrospective for MCP and Multi-Agent Memory

Описание и применение

Система управления открытым исходным кодом для MCP и многопользовательской памяти, включающая подписанные возможности, метаданные происхождения и dry‑run проверки rsync, предотвращает непреднамеренные удаления и позволяет быстро устранять вредоносные данные.

Задача

A rsync job with a deleted exclusion list removed 70+ private modules, revealing that agent stacks can silently propagate poisoned data through shared memory and unscoped tools.

Результат

The system now prevents accidental deletions, tracks provenance of memory writes, and provides a governance framework that surfaces and resolves conflicts before they become incidents.

Рабочий процесс

• Rebuild exclusion list and manually restore missing modules
• Add signed capability files to MCP servers and reject unsigned or overly privileged tools
• Add provenance metadata to every memory write
• Implement dry-run rsync checks before deletion
• Establish incident ledger and governance artifacts
• Use council arbitration for conflicting memory claims

Доказательства

rsync pulling modules off a dev box into a working tree, --delete on, an exclusion list deciding what survived the pass.

Источник

Every server ships a signed capability file — tool names, input and output schemas, the scopes it claims, and an owner key on it.

Источник

Every write into shared long-term memory now carries agent_id, tool_call_id, source_hash, timestamp, and a confidence value.

Источник

The fix that came out of the sync incident had nothing to do with the exclusion list. Every run now does a dry pass first: the same rsync invocation with --dry-run.

Источник