session-memory — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited session-memory (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Maintain a single structured markdown document that tracks what is happening right now in the current work session. This is within-session continuity, distinct from remember() (cross-session semantic memory) and stash (coarse checkpoint).
Invoke on any of these triggers:
"show session notes", "note the session", "write it down"
"before you forget", "write that down", "for when context gets compressed"
a bugfix, a design choice, a reversal after correction) and no note has been updated for a while
Do NOT invoke for:
remember()stashEvery session note uses exactly these sections, in this order, with these headers. Preserve the structure on every update. Never rename or reorder sections. Update the content within sections; leave empty sections present with a single _(nothing yet)_ placeholder.
# Session: {short title, 3-8 words, derived from the initial task}
## Current State
_What is actively being worked on right now. Explicit next step._
## Task Specification
_What the user originally asked for. Constraints, acceptance criteria,
design decisions that framed the work._
## Files and Functions
_Important paths touched or referenced, one per line, with a one-line
note on what they contain and why they matter._
## Errors & Corrections
_Errors encountered and how they were fixed. User corrections to my
approach — these have priority over routine progress entries._
## Key Decisions
_Choices made during the session with their rationale. One bullet per
decision. Lead with the choice, then the why._
## Worklog
_Terse, append-only, chronological. One line per attempt or step.
Prefix with ✓ (done), ✗ (failed), → (in progress), or ↺ (reverted)._Persist as a procedure memory via the remembering skill, so notes survive container death within the session thread.
from remembering.scripts import remember, recall, supersede
# First write in a session: create the memory
note_id = remember(
note_markdown,
"procedure",
tags=["session-memory", "active"],
priority=1,
)
# Subsequent updates: find the active note and supersede it
existing = recall(tags_all=["session-memory", "active"], n=1)
if existing:
note_id = supersede(existing[0].id, updated_markdown, "procedure",
tags=["session-memory", "active"], priority=1)Session boundary: when the user says "session done", "wrap up", "end session", or the conversation is clearly winding down, retag the active note from active to archived by superseding it with the same body and tags=["session-memory", "archived"].
One note is active at a time. If recall(tags_all=["session-memory", "active"]) returns more than one, the oldest is stale — archive it before updating the current one.
On each invocation:
"active"], n=1)`. Work from its current body — do not regenerate from scratch.
## Worklog.Do not drop prior content unless it is now wrong (then move the correction to ## Errors & Corrections).
approach, that goes into ## Errors & Corrections before other updates.
captured in a stash or a remember() call, reference it by ID rather than restating. Notes are supplementary, not duplicative.
supersede(). This keeps exactly one active note per session.
Target ~12K tokens for the note document. Prefer concise phrasing, but do not truncate substantive content to hit the target — trigger ## Key Decisions consolidation (collapse related bullets) before cutting. If the document exceeds ~20K tokens, compress ## Worklog first (merge consecutive ✓ entries into a single summary line, keep corrections and decisions intact).
Rationale: we run on 200K–1M context models, so the original 2K budget from the issue spec was over-constrained. 12K matches Claude Code's upstream design and leaves ample room for the surrounding conversation.
When the user asks to "show session notes", print the current note body verbatim in a fenced code block. Do not paraphrase.
When updating silently (you triggered it yourself), confirm with a single line: Updated session notes (note id: <short-id>). Do not dump the full body unsolicited.
a requirement.
session-memory + active memory exists per session. Staleactives are archived, not left dangling.
remembering — cross-session memory store (where these notes persist)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.