01 / verified archive

Every memory has a way home.

Hearth keeps the approved source object intact and attaches every derived passage to exact offsets, hashes, and ingestion receipts.

source receipt / 0041verified
original objectsession-0717.txtimmutable
sha-2569d8a…7c21matched
derived segments84traceable

02 / temporal truth

Three clocks. One honest record.

When something happened, when it was observed, and when it entered Hearth remain separate—so an old statement never masquerades as a current belief.

temporal recordcurrent
occurred at12 may / 14:08source
observed at12 may / 14:11capture
valid until02 june / 09:40superseded

03 / context compiler

Give the model enough—not everything.

Each request becomes a budgeted context package with governing memory, immediate work, exact evidence, and reserved room for counterevidence.

context run / 0084128k budget
trusted core8,240 tokenspinned
immediate continuity31,880 tokensrecent
verbatim evidence62,104 tokenscited
counterevidence reserve12,800 tokensheld

04 / memory review

The model may notice. You decide.

Potential durable memories enter a review queue with citations, confidence, sensitivity, and contradiction checks. They remain inactive until the owner acts.

review queue3 pending
working preference3 citationsreview
relationship claim2 contradictionshold
project decision5 citationsreview

05 / tool boundary

Invite the tool. Not the whole archive.

Local models and coding agents receive explicit capabilities. Search and exact reading can be granted while ingestion, deletion, networking, and approval stay outside.

agent capability receiptsession 014
search with provenancereadallowed
compile bounded contextreadallowed
approve memoryownerdenied
open network portsystemdenied

06 / ordinary exit

Change the intelligence. Keep what is yours.

Sources, decisions, receipts, and context manifests live behind a stable local boundary. Replacing a model never requires rebuilding your continuity.

continuity exportready
original sourcesincludedverified
owner decisionsincludedsigned
provider lock-innoneportable