Attested Memory Market

io.github.alexar76v3.15.16更新于 Oct 11, 2026

Attestable memory, truth, provenance. Hybrid Ed25519 + ML-DSA-65 receipts; USDC settlement on Base.

已验证Streamable HTTP可网页运行安全与监控金融知识与记忆

概览

AI 生成的概览

让助手通过远程中枢存储、搜索、验证并认证智能体记忆，并附带签名来源凭证。

功能
这是一个远程 MCP 端点，暴露 market_search 与 market_invoke，背后是打包了三个服务的中枢：记忆市场负责写入、读取、搜索、共享和评分可移植的智能体记忆；真相层负责验证声明、扫描矛盾和打包证据；只追加的来源账本负责认证记忆、获取谱系和验证凭证。共有十二项能力以独立身份发布，搜索结果带有可直接复制的 max_price_usd，中枢会在执行工作或付款前拒绝被改价的路径。
适用场景
当助手需要带有可验证来源与可信信号的记忆，或需要在依据已存上下文行动前检查声明与矛盾时，适合加入。若想通过中枢买卖带定价的记忆单元，也适用。
运行要求
远程可流式 HTTP 端点 Docker Compose v2、Git 和 OpenSSL，生产环境使用 PostgreSQL 16，首次运行会生成密钥。
安装前请注意
付费记忆单元通过 Base 上的 USDC 结算到运维方配置的 PAYMENT_RECIPIENT 地址；服务本身不持有私钥，但购买会花费真实资金。自行托管会生成并轮换 MEMORY_MARKET_API_KEY 等密钥，签名密钥与数据存放在 Docker 卷中。写入、共享和认证记忆会改变已存状态，且中枢可与外部根节点联邦。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Attested Memory Market，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "attested-memory": {
      "type": "http",
      "url": "https://hub.attestedmemory.net/mcp"
    }
  }
}

README

🔄 Synced from a monorepo — but with a live history. attested-memory mirrors the canonical AI-Factory monorepo. History here is append-only (no force-push). Pull requests are welcome — merged PRs are imported back into the monorepo and re-synced here, so your contribution becomes canonical. 💬 Issues · Pull requests both welcome.

[CI] [Pages] [Landing] [Live site] [Python package] [Python >=3.11] [License: Apache-2.0]

[Attested Memory — Memory Market, Truth Layer and Provenance Ledger around one Memory Unit contract]

Attested Memory Hub

Attested Memory — verifiable memory for AI agents
Memory Market · Truth Layer · Provenance Ledger · one Memory Unit contract

Landing · Live site · GitHub Pages · clients/python

Production uses the PostgreSQL 16 profile described in docs/production-postgres.md. Set AIFACTORY_PROD=1 and provide the generated DSNs/secrets; SQLite is intentionally limited to local development and tests.

Verifiable memory for AI agents: every memory can prove where it came from and why it should be trusted, so a forged or poisoned memory is caught before an agent acts on it. Part of the open AIMarket ecosystem; it runs as its own AIMarket-compatible Hub and federates with other hubs.

The hub combines three separately deployable services around one Memory Unit contract:

ServiceRoleCore capabilities
memory-marketPrimary product: store, find, share and price portable agent memorymemory.write, memory.read, memory.search, memory.share, memory.score
truth-layerEvidence and contradiction analysismemory.verify, claim.check, contradiction.scan, evidence.pack
provenance-ledgerAppend-only lineage and signed receiptsmemory.attest, lineage.get, receipt.verify

The market is the product wedge. Truth and provenance are properties of memory, not competing front doors.

The three providers publish 12 live capabilities into the bundled AIMarket Hub under separate identities. Its signed ecosystem.nodes is then discoverable by both AIMarket and Independent Alien Monitor deployments.

Agents can also use the Hub directly through its production MCP endpoint at https://hub.attestedmemory.net/mcp. It exposes market_search and market_invoke; search results include a ready-to-copy max_price_usd, and the Hub rejects a repriced route before work or payment. See MCP access.

Run the hub

Requirements: Docker Compose v2, Git and OpenSSL.

bash
./start.sh

start.sh calls scripts/ensure_env.sh, which generates strong secrets on first run and rotates any replace-with-* / short placeholders left over from .env.example. MEMORY_MARKET_API_KEY is one of those secrets; production deploy shares the same value into the SaaS product shells.

For a production host (HTTPS URLs, KOVA, payment recipient, SaaS edge):

bash
./scripts/deploy_attested_memory.sh   # maintainers: lives in the AIMarket monorepo; see its header

start.sh pins and fetches the Hub runtime, creates mode-0600 local secrets, and starts the complete stack. Data and signing keys are stored in named Docker volumes. Hybrid Ed25519 + ML-DSA-65 signing is enabled and required for this Hub's providers and provenance receipts. The default profile remains local-only; direct settlement fails closed until a receiving wallet is configured.

Direct wallet payments

Set the operator's public Base address in .env and restart the stack:

dotenv
PAYMENT_RECIPIENT=0xYour40HexCharacterBaseAddress

Paid Memory Units can then be purchased from the console or /v1/billing API with canonical Circle USDC on Base. Funds go directly to that address; the service has no private key. It assigns every order an exact amount, verifies the finalized on-chain transfer and issues the buyer's access grant atomically. See the payment guide before enabling it in production.

To become visible in both external Alien Monitors, set AIMARKET_PUBLIC_HUB_URL to the deployment's public HTTPS origin before starting. The bootstrap announces to modelmarket.dev and independentai.network; operators of those roots must still approve and pin the peer. See Alien Monitor integration.

Development

Each service is an independent Python package and can be tested on its own:

bash
./scripts/check.sh

The APIs deliberately use content hashes and references instead of moving private source material between services. See architecture, capabilities, security, payments, and monetization.

Security review status, fixed findings and production deployment gates are documented in docs/security-audit-2026-09-06.md.

Source and contributions

Developed in the AIMarket monorepo and published as alexar76/attested-memory. The published repository also carries the three product shells built on this Hub under apps/: Personal Attested Memory, Team Memory OS and Expert Memory Market. Issues and pull requests are welcome there.

Status

This is a self-hosted MVP: durable memory records, deterministic evidence scoring, append-only hybrid-signed provenance, twelve Hub capabilities, dual-root federation bootstrap, direct Base USDC settlement, and an operator console are implemented. Semantic verification, embeddings, escrow/x402 authorization, refunds, tenancy and production identity are explicit extension points rather than simulated features.

License

Apache-2.0. See LICENSE.

来源：README.md，提交 e3dfdb8

工具

0
工具元数据尚未被收录。

版本历史

1
  1. v3.15.16最新Oct 11, 2026