SuperLocalMemory: Privacy-Preserving Multi-Agent Memory with Bayesian Trust Defense Against Memory Poisoning

Probably not a substantial claim: may not pass S3 (load-bearing).

Community detection uses the Leiden algorithm with ModularityVertexPartition, producing hierarchical subclustering to depth 3.

“Community detection uses the Leiden algorithm [28] with ModularityVertexPartition, producing hierarchical subclustering to depth 3.”

• cites [28] [28] Vincent A. Traag, Ludo Waltman, and Nees Jan van Eck. From Louvain to Leiden: Guaranteeing well-connected communities. Scientific Reports , 9(1):5233, 2019. - sourceSupported

Probably not a substantial claim: may not pass S3 (load-bearing).

Pattern learning uses a Beta-Binomial Bayesian model to track user preferences across 8 technology categories.

“Inspired by the MACLA framework [8], pattern learning uses a Beta-Binomial Bayesian model to track user preferences across 8 technology categories.”

• cites [8] [8] Saman Forouzandeh, Wei Peng, Parham Moradi, Xinghuo Yu, and Mahdi Jalili. Learning hierarchical procedural memory for LLM agents through Bayesian selection and contrastive refinement. arXiv preprint arXiv:2512.18950 , 2025. - sourceSupported

Probably not a substantial claim: may not pass S3 (load-bearing).

Mem0 now offers local deployment via OpenMemory MCP (requiring Docker, PostgreSQL, Qdrant).

“Mem0 [4] now offers local deployment via OpenMemory MCP (requiring Docker, PostgreSQL, Qdrant)”

• cites [4] [4] Prateek Chhikara, Dev Khant, Saket Aryan, Taranjeet Singh, and Deshraj Yadav. Mem0: Building production-ready AI agents with scalable long-term memory. arXiv preprint arXiv:2504.19413 , 2025. - sourceCould not verify

  Section 2.1 (p. 4) describes Mem0’s database-backed architecture, and the Conclusion (p. 14) calls it deployable at scale. Neither passage establishes local deployment via OpenMemory MCP. Searches for OpenMemory MCP, Docker, PostgreSQL, and Qdrant found no passage addressing those details. (LLM, conf=0.72)

  Experimental — accuracy not yet measured

Probably not a substantial claim: may not pass S3 (load-bearing).

Zep deprecated its community edition (2025).

“Zep deprecated its community edition (2025).”

• cites [22] [22] Preston Rasmussen, Pavlo Paliychuk, Travis Beauvais, Jack Ryan, and Daniel Chalef. Zep: A temporal knowledge graph architecture for agent memory. arXiv preprint arXiv:2501.13956 , 2025. - sourceCould not verify

  The Introduction (p. 2) describes Zep as a production memory service, and the Conclusion (p. 8) discusses its architecture and performance. Neither addresses a community edition or its deprecation. Searches for “community edition deprecated” and “open-source community edition discontinued deprecation” found no passage supporting the claim. (LLM, conf=0.76)

  Experimental — accuracy not yet measured

Probably not a substantial claim: may not pass S3 (load-bearing).

MemoryBank provides temporal-aware memory architecture.

“MemoryBank [31] provides temporal-aware memory architecture.”

• cites [31] [31] Wanjun Zhong, Lianghong Guo, Qiqi Gao, He Ye, and Yanlin Wang. MemoryBank: Enhancing large language models with long-term memory. In Proceedings of the AAAI Conference on Artificial Intelligence , 2024. sourceSupported

Probably not a substantial claim: may not pass S3 (load-bearing).

LoCoMo evaluates conversational agent memory through multiturn dialogue QA.

“LoCoMo [18] evaluates conversational agent memory through multiturn dialogue QA.”

• cites [18] [18] Adyasha Maharana, Dong-Ho Lee, Sergey Tulyakov, Mohit Bansal, Francesco Barbieri, and Yuwei Fang. Evaluating very long-term conversational memory of LLM agents. In Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics (ACL) , 2024. - sourceSupported

Probably not a substantial claim: may not pass S3 (load-bearing).

Work on agent privacy distinguishes memorization from genuine privacy threats.

“Work on agent privacy [20] distinguishes memorization from genuine privacy threats.”

• cites [20] [20] Niloofar Mireshghallah and Tianshi Li. Position: Privacy is not just memorization! arXiv preprint arXiv:2510.01645 , 2025. - sourceSupported

Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

Mem0 combines graph, vector, and key-value storage with cloud-default architecture, achieving J=66.9 on LoCoMo.

“Mem0 [4] combines graph, vector, and key-value storage with cloud-default architecture (free tier to enterprise), achieving J=66.9 on LoCoMo”

• cites [4] [4] Prateek Chhikara, Dev Khant, Saket Aryan, Taranjeet Singh, and Deshraj Yadav. Mem0: Building production-ready AI agents with scalable long-term memory. arXiv preprint arXiv:2504.19413 , 2025. - sourcePartly supported

  The performance table (p. 11) reports an overall LoCoMo J score of 66.88 for Mem0, which rounds to 66.9. Sections 2.1–2.2 (pp. 5–6) describe vector storage for Mem0 and graph storage for the distinct Mem0g variant. The passages do not establish key-value storage or a cloud-default architecture with free-to-enterprise tiers, and the graph-enhanced variant has a different overall J score of 68.44. (LLM, conf=0.88)

  Experimental — accuracy not yet measured

Probably not a substantial claim: may not pass S3 (load-bearing).

GraphRAG establishes hierarchical graph-based retrieval using Leiden community detection for multi-level summarization.

“GraphRAG [6] establishes hierarchical graph-based retrieval using Leiden community detection for multi-level summarization.”

• cites [6] [6] Darren Edge, Ha Trinh, Newman Cheng, Joshua Bradley, Alex Chao, Apurva Mody, Steven Truitt, and Jonathan Larson. From local to global: A graph RAG approach to query-focused summarization. arXiv preprint arXiv:2404.16130 , 2024. - sourceSupported

Probably not a substantial claim: may not pass S3 (load-bearing).

Analysis of MCP security reveals tool-level attack vectors.

“Analysis of MCP security [10] reveals tool-level attack vectors.”

• cites [10] [10] Xinyi Hou, Yanjie Zhao, Shenao Wang, and Haoyu Wang. Model context protocol (MCP): Landscape, security threats, and future research directions. arXiv preprint arXiv:2503.23278 , 2025. - sourceSupported

May combine two claims.

MemoryBench found no advanced system consistently outperforms RAG baselines, suggesting current benchmarks may not capture what differentiates memory architectures.

“MemoryBench [1] found no advanced system consistently outperforms RAG baselines, suggesting current benchmarks may not capture what differentiates memory architectures.”

• cites [1] [1] Qingyao Ai, Yichen Tang, Changyue Wang, Jianming Long, Weihang Su, and Yiqun Liu. MemoryBench: A benchmark for memory and continual learning in LLM systems. arXiv preprint arXiv:2510.17281 , 2025. - sourcePartly supported

  Section 3.3 directly reports that none of the advanced memory-based systems consistently outperformed the RAG baselines on MemoryBench. Sections 2.1 and 3.3 also describe limitations of previous benchmarks, but the paper does not conclude that benchmarks generally fail to capture what differentiates memory architectures; it presents MemoryBench as addressing some of those limitations. The passages provide no page numbers. (LLM, conf=0.82)

  Experimental — accuracy not yet measured

Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

The Multi-Agent Blackboard pattern reports 13-57% improvement over RAG alone, validating shared memory as a coordination mechanism.

“The Multi-Agent Blackboard pattern [24] reports 13-57% improvement over RAG alone, validating shared memory as a coordination mechanism-a pattern SuperLocalMemory implements through its event-driven architecture.”

• cites [24] [24] Alireza Salemi, Mihir Parmar, Palash Goyal, Yiwen Song, Jinsung Yoon, Hamed Zamani, Tomas Pfister, and Hamid Palangi. LLM-based multi-agent blackboard system for information discovery in data science. arXiv preprint arXiv:2510.01285 , 2025. - sourcePartly supported

  The paper’s opening summary (page unavailable) reports 13%–57% relative improvements over the best baseline, not specifically over RAG alone; §4.2 reports a 54.1% gain over RAG in one comparison. The Introduction (page unavailable) describes the blackboard as a coordination mechanism but explicitly distinguishes it from the conventional shared-memory paradigm. The claim therefore captures the performance gain and shared coordination, but overstates what the cited results validate about shared memory. (LLM, conf=0.87)

  Experimental — accuracy not yet measured

Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

Zep uses temporal knowledge graphs, achieving 72.3% on LongMemEval.

“Zep [22] uses temporal knowledge graphs, achieving 72.3% on LongMemEval.”

• cites [22] [22] Preston Rasmussen, Pavlo Paliychuk, Travis Beauvais, Jack Ryan, and Daniel Chalef. Zep: A temporal knowledge graph architecture for agent memory. arXiv preprint arXiv:2501.13956 , 2025. - sourcePartly supported

  The Introduction (p. 2) describes Zep as powered by a temporally aware knowledge graph engine. But Table 2 in the LongMemEval results (p. 7) reports Zep scores of 63.8% with gpt-4o-mini and 71.2% with gpt-4o, not 72.3%. (LLM, conf=0.90)

  Experimental — accuracy not yet measured

Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

MemOS abstracts memory as an OS resource with three-layer governance and added MCP support in v1.1.2.

“MemOS [17] abstracts memory as an OS resource with three-layer governance and added MCP support in v1.1.2.”

• cites [17] [17] Zhiyu Li, Shichao Song, Hanyu Wang, Simin Niu, Ding Chen, et al. MemOS: An operating system for memory-augmented generation in large language models. arXiv preprint arXiv:2505.22101 , 2025. - sourcePartly supported

  Section 3 (p. 3) describes memory as a schedulable core resource, and Section 4.3 (p. 5) describes a three-layer memory-governance architecture. The searched passages from our copy do not mention MCP support or version v1.1.2, so that addition is not supported by this source. (LLM, conf=0.88)

  Experimental — accuracy not yet measured

Probably not a substantial claim: may not pass S3 (load-bearing).

MACLA introduces Beta-Binomial Bayesian confidence for multi-agent learning.

“MACLA[8] introduces Beta-Binomial Bayesian confidence for multi-agent learning.”

• cites [8] [8] Saman Forouzandeh, Wei Peng, Parham Moradi, Xinghuo Yu, and Mahdi Jalili. Learning hierarchical procedural memory for LLM agents through Bayesian selection and contrastive refinement. arXiv preprint arXiv:2512.18950 , 2025. - sourcePartly supported

  Section 4.2, “Bayesian Reliability and Utility Selection” (page not available), says MACLA tracks procedure success and failure with Beta posteriors and uses them to estimate reliability and select procedures, supporting the Beta-Binomial confidence aspect. The paper describes MACLA as an LLM agent, not a multi-agent learning system; its Related Works section associates multi-agent controllers with SAGE, not MACLA. (LLM, conf=0.88)

  Experimental — accuracy not yet measured

Probably not a substantial claim: may not pass S3 (load-bearing).

LoCoMo comparability is limited.

“LoCoMo comparability is limited [1]”

• cites [1] [1] Qingyao Ai, Yichen Tang, Changyue Wang, Jianming Long, Weihang Su, and Yiqun Liu. MemoryBench: A benchmark for memory and continual learning in LLM systems. arXiv preprint arXiv:2510.17281 , 2025. - sourceSupported

May combine two claims.

The framework achieves strong separation between benign and malicious agents (trust gap = 0.90) with zero false positives.

“The framework achieves strong separation between benign and malicious agents (trust gap = 0.90) with zero false positives-all benign agents converge to trust 0.945 through accumulated positive evidence.”

Probably not a substantial claim: may not pass S3 (load-bearing).

The core requires only Python standard library, zero external dependencies for base operation.

“The core requires only Python standard library ( sqlite3 , json , hashlib , re , datetime )-zero external dependencies for base operation.”

Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

Brute-force edge computation is O(n^2); an optional HNSW index reduces this to O(n log n).

“Brute-force edge computation is O ( n 2 ) ; an optional HNSW index [19] reduces this to O ( n log n ) .”

• cites [19] [19] Yu A. Malkov and D. A. Yashunin. Efficient and robust approximate nearest neighbor search using hierarchical navigable small world graphs. IEEE Transactions on Pattern Analysis and Machine Intelligence , 42(4):824-836, 2020. - sourceNot checked — no full text of the source

Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

The adaptive learning layer addresses the layer differentiation limitation identified in initial evaluation: while layers 3-4 provide structural enrichment, they did not originally improve search ranking.

“Added in v2.7, the adaptive learning layer addresses the layer differentiation limitation identified in our initial evaluation (Section 5.5): while layers 3-4 provide structural enrichment, they did not originally improve search ranking.”

May combine two claims.

Graph construction takes 0.28s for 100 memories, 10.6s for 1,000, and 277s for 5,000.

“Knowledge graph construction confirms O ( n 2 ) scaling due to pairwise cosine similarity computation: 0.28s for 100 memories, 10.6s for 1,000, and 277s for 5,000 (the system's design limit).”

Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

The Leiden algorithm consistently identifies 6-7 top-level communities with hierarchical subclustering reaching depth 3.

“The Leiden algorithm consistently identifies 6-7 top-level communities with hierarchical subclustering reaching depth 3.”

Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based). May combine two claims.

SuperLocalMemory is open-source (MIT) and integrates with 17+ development tools via Model Context Protocol.

“SuperLocalMemory is open-source (MIT) and integrates with 17+ development tools via Model Context Protocol.”

Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based). May combine two claims.

Parent lookup is O(1); full path construction is O(depth).

“Parent lookup is O (1) ; full path construction is O ( depth ) .”

May combine two claims.

Layers 3-4 maintain but do not improve MRR.

“Layers 3-4 maintain but do not improve MRR-the Graph and Pattern layers provide structural enrichment but do not modify the search ranking algorithm.”

May combine two claims.

At 10 agents, throughput drops to 25 ops/sec due to SQLite's single-writer serialization, with P95 latency reaching 754ms.

“At 10 agents, throughput drops to 25 ops/sec due to SQLite's single-writer serialization, with P95 latency reaching 754ms.”

Probably not a substantial claim: may not pass S3 (load-bearing).

SuperLocalMemory has not been evaluated on LoCoMo.

“SuperLocalMemory has not been evaluated on it (Section 7).”

Probably not a substantial claim: may not pass S3 (load-bearing).

No formal user study has been conducted.

“No formal user study has been conducted.”

Classified as probably not a substantial claim.

The OWASP Top 10 for Agentic AI identifies memory and context poisoning (ASI06) as one of ten critical threats to agentic systems.

“The OWASP Top 10 for Agentic AI identifies memory and context poisoning (ASI06) as one of ten critical threats to agentic systems [21].”

• cites [21] [21] OWASP Foundation. OWASP top 10 for agentic applications. https://owasp.org/ www-project-top-10-for-ai-agents/ , 2025. -Not matched

  Couldn’t be matched to a paper in Crossref, so it can’t be checked.

Probably not a substantial claim: may not pass S4 (based).

The trust defense framework addresses OWASP ASI06 through per-agent behavioral monitoring and per-memory provenance tracking.

“The trust defense framework addresses OWASP ASI06 through per-agent behavioral monitoring and per-memory provenance tracking.”

Classified as probably not a substantial claim.

All behavioral data is stored in a separate learning.db database, architecturally isolated from the memory store.

“All behavioral data (feedback signals, learned patterns, model checkpoints) is stored in a separate learning.db database, architecturally isolated from the memory store.”

May combine two claims.

The Beta posterior naturally absorbs early good behavior into the α parameter, but accumulated negative signals during the poisoning phase grow β until the posterior mean drops below the enforcement threshold.

“The Beta posterior naturally absorbs early good behavior into the α parameter, but accumulated negative signals during the poisoning phase grow β until the posterior mean drops below the enforcement threshold.”

Probably not a substantial claim: may not pass S3 (load-bearing).

Key-term extraction uses TF-IDF vectorization to identify top terms per memory.

“Key-term extraction uses TF-IDF vectorization to identify top terms per memory.”

Classified as probably not a substantial claim.

The adaptive layer re-ranks candidates based on learned user preferences entirely locally, without LLM inference calls.

“The adaptive layer sits between the search pipeline and result delivery, re-ranking candidates based on learned user preferences-entirely locally, without LLM inference calls.”

Probably not a substantial claim: may not pass S3 (load-bearing).

The system caps graph construction at 10,000 memories.

“The system caps graph construction at 10,000 memories-an explicit design choice balancing graph utility against computational cost (see Section 5).”

Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

The DbConnectionManager implements WAL for concurrent read access, a thread-safe write queue serializing all mutations, and a connection pool for read operations.

“The DbConnectionManager implements WAL (Write-Ahead Logging) for concurrent read access, a thread-safe write queue serializing all mutations, and a connection pool for read operations.”

Classified as probably not a substantial claim. May combine two claims.

The system mines preferences across three complementary layers: cross-project technology preferences, project context detection, and workflow pattern mining.

“The system mines preferences across three complementary layers: (1) cross-project technology preferences aggregated across all user profiles using temporal decay ( τ 1 / 2 = 365 days), detecting preferred frameworks, languages, and tools; (2) project context detection using four signals (active file paths, recent tags, cluster membership, and explicit project labels) to scope retrieval to relevant”

May combine two claims.

SuperLocalMemory personalizes retrieval through adaptive learning-to-rank without cloud dependencies or LLM inference calls.

“personalizing retrieval through adaptive learning-to-rank-all without cloud dependencies or LLM inference calls”

Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

Behavioral data is isolated in a separate database supporting GDPR Article 17 erasure requests via one-command deletion.

“Behavioral data is isolated in a separate database supporting GDPR Article 17 erasure requests via onecommand deletion.”

Probably not a substantial claim: may not pass S3 (load-bearing).

Confidence is clamped to [0, 0.95] to prevent overconfidence on limited evidence.

“Confidence is clamped to [0 , 0 . 95] to prevent overconfidence on limited evidence.”

Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

Tiered retention preserves hot events for 48h, warm for 14 days, and cold for 30 days.

“Tiered retention preserves hot events for 48h, warm for 14 days, and cold for 30 days with aggregate statistics archived indefinitely.”

May combine two claims.

The decay factor ensures early good behavior stabilizes trust, but accumulated negative signals from the poisoning phase gradually overcome the established baseline.

“The decay factor ensures early good behavior stabilizes trust, but accumulated negative signals from the poisoning phase gradually overcome the established baseline.”

Classified as probably not a substantial claim. May combine two claims.

The agent registry records each connected agent's protocol, write/recall counters, and last-seen timestamps, feeding into trust scoring.

“Protocol-aware tracking records each connected agent's protocol (MCP, CLI, REST), write/recall counters, and last-seen timestamps. This feeds directly into the trust scoring framework (Section 4).”

Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

All agents start with equal trust t0 = 1.0.

“All agents start with equal trust t 0 = 1 . 0 .”

Probably not a substantial claim: may not pass S3 (load-bearing).

A materialized path scheme maintains parent-child relationships between memories, enabling contextual retrieval.

“A materialized path scheme maintains parent-child relationships between memories, enabling contextual retrieval ('retrieve this memory and all sub-memories').”

Probably not a substantial claim: may not pass S4 (based).

As of v2.6, the framework operates in enforcement mode: agents with trust scores below a configurable threshold (default t < 0.3) are blocked from write and delete operations.

“As of v2.6, the framework operates in enforcement mode : agents with trust scores below a configurable threshold (default t &lt; 0 . 3 ) are blocked from write and delete operations, providing active defense against persistent memory poisoning.”

Probably not a substantial claim: may not pass S4 (based). May combine two claims.

Signal types and magnitudes are deliberately asymmetric-negative signals carry larger magnitude, making trust harder to gain than to lose.

“Signal types and magnitudes are deliberately asymmetric-negative signals carry larger magnitude, making trust harder to gain than to lose:”

Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

If any layer fails, the system degrades gracefully to the next available layer.

“If any layer fails, the system degrades gracefully to the next available layer.”

Probably not a substantial claim: may not pass S3 (load-bearing).

Edges are constructed via pairwise cosine similarity (threshold > 0.3).

“Edges are constructed via pairwise cosine similarity (threshold > 0 . 3 ).”

Probably not a substantial claim: may not pass S3 (load-bearing).

SuperLocalMemory uses a four-layer progressive enhancement architecture where each layer adds capability without replacing lower layers.

“SuperLocalMemory uses a four-layer progressive enhancement architecture (Figure 1) where each layer adds capability without replacing lower layers.”

Probably not a substantial claim: may not pass S4 (based).

None of the current memory systems provide trust scoring or memory poisoning defense mechanisms.

“Critically, none provide trust scoring or memory poisoning defense mechanisms.”

• AssumptionRests on an assumption: None of the current memory systems provide trust scoring or memory poisoning defense mechanisms.

Probably not a substantial claim: may not pass S3 (load-bearing).

The system caps graph construction at 10,000 memories (raised from 5,000 in v2.6 via optional HNSW-accelerated edge building).

“The system caps graph construction at 10,000 memories (raised from 5,000 in v2.6 via optional HNSW-accelerated edge building).”

Classified as probably not a substantial claim.

The graded relevance labels used for NDCG computation are derived from the system's own importance scores, which the adaptive ranker includes as one of nine features.

“We acknowledge that the graded relevance labels used for NDCG computation are derived from the system's own importance scores, which the adaptive ranker includes as one of nine features.”

Probably not a substantial claim: may not pass S3 (load-bearing).

The event bus broadcasts events via SSE, WebSocket, and webhook endpoints.

“A SQLite-backed event log with 200-event in-memory buffer broadcasts events ( memory.created , memory.recalled , agent.connected , graph.updated ) via Server-Sent Events (SSE), WebSocket, and webhook endpoints.”

May combine two claims.

Cloud-default designs create centralized attack surfaces: multi-tenant storage means one compromised agent's memories can affect downstream users, data in transit exposes memory content, and users cannot independently audit provenance or verify integrity.

“Cloud-default designs create centralized attack surfaces: multi-tenant storage means one compromised agent's memories can affect downstream users, data in transit exposes memory content, and users cannot independently audit provenance or verify integrity.”

Probably not a substantial claim: may not pass S3 (load-bearing).

The event coordination layer transforms SuperLocalMemory from passive storage to an active coordination hub.

“Added in v2.5, the event coordination layer transforms SuperLocalMemory from passive storage to an active coordination hub.”

May combine two claims.

This enables forensic isolation of all memories from a specific agent and modification history tracing for any memory.

“This enables forensic isolation of all memories from a specific agent and modification history tracing for any memory.”

Probably not a substantial claim: may not pass S3 (load-bearing).

The Model Context Protocol standardizes agent-to-tool communication (17+ supported tools).

“The Model Context Protocol [2] standardizes agent-to-tool communication (17+ supported tools).”

• cites [2] [2] Anthropic. Model context protocol specification. https://modelcontextprotocol.io , 2024. -Not matched

  Couldn’t be matched to a paper in Crossref, so it can’t be checked.

Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

Our Layer 4 adapts MACLA's confidence model for local preference tracking.

“Our Layer 4 adapts MACLA's confidence model for local preference tracking.”

Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

The Agent-to-Agent Protocol enables inter-agent coordination but intentionally provides no shared memory.

“The Agent-to-Agent Protocol [9] enables inter-agent coordination but intentionally provides no shared memory-a gap SuperLocalMemory is architecturally prepared to fill as the persistence layer in future work (Section 7).”

• cites [9] [9] Google and Linux Foundation. Agent-to-agent protocol specification. https:// a2a-protocol.org , 2025. -Not matched

  Couldn’t be matched to a paper in Crossref, so it can’t be checked.

Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based). May combine two claims.

Brute-force O(n^2) edge computation is mitigated by optional HNSW (O(n log n)), raising the limit to 10,000 memories.

“Brute-force O ( n 2 ) edge computation is mitigated by optional HNSW ( O ( n log n ) ), raising the limit to 10,000 memories.”

Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

Letta demonstrated that a simple filesystem-based agent achieves 74.0% on LoCoMo, questioning the value of specialized memory retrieval mechanisms.

“Letta [15] demonstrated that a simple filesystem-based agent achieves 74.0% on LoCoMo, questioning the value of specialized memory retrieval mechanisms.”

• cites [15] [15] Letta. Benchmarking AI agent memory: Is a filesystem all you need? https://www.letta. com/blog/benchmarking-ai-agent-memory , 2025. -Not matched

  Couldn’t be matched to a paper in Crossref, so it can’t be checked.

May combine two claims.

This pilot confirms that the system retrieves relevant memories for real developer workflows, with strong within-result ranking quality.

“This pilot confirms that the system retrieves relevant memories for real developer workflows, with strong within-result ranking quality.”

Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

Learning-to-rank approaches using gradient boosted trees with LambdaRank objectives are well-established in web search but have not been applied to local memory systems.

“For retrieval personalization, learning-to-rank approaches using gradient boosted trees [12] with LambdaRank objectives [3] are well-established in web search but have not been applied to local memory systems.”

• cites [12] [12] Guolin Ke, Qi Meng, Thomas Finley, Taifeng Wang, Wei Chen, Weidong Ma, Qiwei Ye, and Tie-Yan Liu. LightGBM: A highly efficient gradient boosting decision tree. In Advances in Neural Information Processing Systems (NeurIPS) , 2017. -Not matched

  Couldn’t be matched to a paper in Crossref, so it can’t be checked.

• cites [3] [3] Christopher J. C. Burges. From RankNet to LambdaRank to LambdaMART: An overview. In Microsoft Research Technical Report MSR-TR-2010-82 , 2010. -Not matched

  Couldn’t be matched to a paper in Crossref, so it can’t be checked.

Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

Cognee provides graph-aware embeddings with MCP support and ingestion from 30+ sources.

“Cognee [5] provides graph-aware embeddings with MCP support and ingestion from 30+ sources.”

• cites [5] [5] Cognee AI. Cognee: Deterministic LLMs outputs for ai applications using knowledge graphs and semantic memory. https://github.com/topoteretes/cognee , 2025. -Not matched

  Couldn’t be matched to a paper in Crossref, so it can’t be checked.

Probably not a substantial claim: may not pass S3 (load-bearing).

A-MEM introduces Zettelkasten-style note-linking.

“A-MEM [29] introduces Zettelkasten-style note-linking (NeurIPS 2025).”

• cites [29] [29] Wujiang Xu, Zujie Liang, Kai Mei, Hang Gao, Juntao Tan, and Yongfeng Zhang. A-MEM: Agentic memory for LLM agents. In Advances in Neural Information Processing Systems (NeurIPS) , 2025. -Not matched

  Couldn’t be matched to a paper in Crossref, so it can’t be checked.

Probably not a substantial claim: may not pass S3 (load-bearing).

Further scaling requires graph partitioning.

“Further scaling requires graph partitioning.”

Probably not a substantial claim: may not pass S1 (asserted), S2 (checkable), S3 (load-bearing), S4 (based).

Integrating trust as a ranking signal would enable soft degradation.

“Integrating trust as a ranking signal would enable soft degradation.”

Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

To our knowledge, SuperLocalMemory is the first system combining local-first architecture with trust scoring specifically targeting ASI06 defense.

“To our knowledge, SuperLocalMemory is the first system combining local-first architecture with trust scoring specifically targeting ASI06 defense.”

Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

Trust enforcement blocks agents below 0.3, but trust scores do not yet influence the re-ranker's feature vector.

“Trust enforcement blocks agents below 0.3, but trust scores do not yet influence the re-ranker's feature vector.”

Probably not a substantial claim: may not pass S4 (based). May combine two claims.

Unlike A-MEM, which requires LLM calls for memory operations, SuperLocalMemory operates entirely locally with zero inference cost, provides trust scoring against memory poisoning, and maintains privacy-preserving behavioral learning.

“Unlike A-MEM, which requires LLM calls for memory operations, SuperLocalMemory operates entirely locally with zero inference cost, provides trust scoring against memory poisoning (absent in A-MEM), and maintains privacy-preserving behavioral learning.”

Probably not a substantial claim: may not pass S3 (load-bearing).

Time-weighted sequential pattern mining inspires our sliding-window-based workflow pattern detection.

“Time-weighted sequential pattern mining [16] inspires our sliding-window-based workflow pattern detection.”

• cites [16] [16] Jian Li, Kai Zhang, and Yue Wang. Time-weighted sequential pattern mining for user behavior analysis. IEEE Transactions on Knowledge and Data Engineering , 2020. -Not matched

  Couldn’t be matched to a paper in Crossref, so it can’t be checked.

Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

To our knowledge, SuperLocalMemory is the first system combining fully local, zero-LLM adaptive re-ranking with privacy-preserving behavioral learning for personal AI memory.

“To our knowledge, SuperLocalMemory is the first system combining fully local, zero-LLM adaptive re-ranking with privacy-preserving behavioral learning for personal AI memory.”

May combine two claims.

Synthetic bootstrap mitigates ML cold-start but cannot substitute for genuine behavioral signals in earlier phases.

“Synthetic bootstrap mitigates ML cold-start but cannot substitute for genuine behavioral signals in earlier phases.”

Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

SuperLocalMemory is designed for developer workflow memory-architectural decisions, coding patterns, project context-a fundamentally different retrieval task.

“SuperLocalMemory is designed for developer workflow memory-architectural decisions, coding patterns, project context-a fundamentally different retrieval task.”

Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

SuperLocalMemory remains the only system combining zero-dependency local-first architecture, Bayesian trust scoring, and adaptive local learning without LLM inference.

“SuperLocalMemory remains the only system combining zero-dependency local-first architecture, Bayesian trust scoring, and adaptive local learning without LLM inference.”

Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based). May combine two claims.

The adaptive re-ranking requires 20+ feedback signals for rule-based phase and 200+ across 50+ unique queries for ML personalization.

“The adaptive re-ranking requires 20+ feedback signals for rule-based phase and 200+ across 50+ unique queries for ML personalization.”

Probably not a substantial claim: may not pass S4 (based).

None of these systems provide trust scoring for memory poisoning defense.

“None of these systems provide trust scoring for memory poisoning defense.”

Probably not a substantial claim: may not pass S3 (load-bearing).

Recent work on BM25-to-re-ranker pipelines for personal collections and cold-start mitigation through synthetic bootstrapping inform our three-phase adaptive ranking design.

“Recent work on BM25-to-re-ranker pipelines for personal collections [26] and cold-start mitigation through synthetic bootstrapping [13] inform our three-phase adaptive ranking design.”

• cites [26] [26] Ricardo Santos and Ming Wei. Personalized re-ranking for local document collections using implicit feedback. In Proceedings of the International Conference on Information, Process, and Knowledge Management (eKNOW) , 2025. -Not matched

  Couldn’t be matched to a paper in Crossref, so it can’t be checked.

• cites [13] [13] Hyunwoo Kim and Seonghyeon Park. Addressing cold-start in personalized search: Synthetic bootstrapping from content features. In Proceedings of the Language Resources and Evaluation Conference (LREC) , 2024. -Not matched

  Couldn’t be matched to a paper in Crossref, so it can’t be checked.

Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

Our Layer 3 adapts this for local operation with TF-IDF key-term extraction instead of LLM-based entity extraction.

“Our Layer 3 adapts this for local operation with TF-IDF key-term extraction instead of LLM-based entity extraction.”