Governance Season: An Open-Source Retrospective for MCP and Multi-Agent Memory

说明与用途

针对 MCP 和多代理记忆的开源治理框架，采用签名能力、来源元数据和 rsync dry‑run 检查，防止意外删除并快速修复被污染的数据。

问题

A rsync job with a deleted exclusion list removed 70+ private modules, revealing that agent stacks can silently propagate poisoned data through shared memory and unscoped tools.

结果

The system now prevents accidental deletions, tracks provenance of memory writes, and provides a governance framework that surfaces and resolves conflicts before they become incidents.

工作流

• Rebuild exclusion list and manually restore missing modules
• Add signed capability files to MCP servers and reject unsigned or overly privileged tools
• Add provenance metadata to every memory write
• Implement dry-run rsync checks before deletion
• Establish incident ledger and governance artifacts
• Use council arbitration for conflicting memory claims

证据

rsync pulling modules off a dev box into a working tree, --delete on, an exclusion list deciding what survived the pass.

来源

Every server ships a signed capability file — tool names, input and output schemas, the scopes it claims, and an owner key on it.

来源

Every write into shared long-term memory now carries agent_id, tool_call_id, source_hash, timestamp, and a confidence value.

来源

The fix that came out of the sync incident had nothing to do with the exclusion list. Every run now does a dry pass first: the same rsync invocation with --dry-run.

来源