layered-recall — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited layered-recall (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Progressive memory system with two orthogonal dimensions of lazy loading:
Combined savings: 10-50x tokens vs eager loading.
Instead of loading full memory entries upfront, agents fetch in 3 depths:
Depth 1: IDs only (~10 tokens per match)
Agent decides which are worth investigating
Depth 2: Summary (~50 tokens per match)
Room, type, preview (first 80 chars)
Agent confirms relevance
Depth 3: Full content (~500+ tokens per match)
Only fetched for confirmed matchesExample flow:
1. Agent searches "auth refresh token"
2. Depth 1 returns 8 IDs: d-abc123, d-def456, ...
3. Agent requests Depth 2 for IDs 1-3
4. Sees room=authentication, type=decision, preview="Chose JWT..."
5. Agent confirms IDs 1,3 are relevant
6. Requests Depth 3 only for those 2 entries
7. Gets full content for ~1000 tokens instead of 4000+Layer 1: Identity (always loaded, ~200 tokens)
Who is the user? What are their preferences?
Layer 2: Critical Facts (per-project, ~500 tokens)
Hard constraints, active decisions, blockers
Layer 3: Room Recall (on-demand, ~1-2K tokens)
Relevant memories for current task domain
Layer 4: Deep Search (when needed, ~2-5K tokens)
Full semantic search across all memoriesLoaded at every session start. Contains:
Source: ~/.claude/projects/*/memory/user_*.md
Loaded when entering a project directory. Contains:
Source: ~/.claude/projects/*/memory/project_*.md + thoughts/CONTEXT.md
Loaded when task domain is detected (auth, database, deploy, etc.). Contains:
Source: Memory palace rooms + mature-instincts.json filtered by domain
Trigger: Intent classifier detects domain (e.g., "fix the login bug" -> room: authentication)
Only loaded when explicitly needed or when Layers 1-3 don't have enough context. Contains:
Source: PostgreSQL vector search + palace cross-wing search
Trigger: Agent explicitly queries, or user asks "have we done this before?"
Session Start
-> Load Layer 1 (identity)
-> Detect project -> Load Layer 2 (facts)
-> User sends prompt
-> Classify intent/domain -> Load Layer 3 (room)
-> If insufficient context -> Load Layer 4 (deep)| Layer | Tokens | When |
|---|---|---|
| L1 | ~200 | Always |
| L2 | ~500 | Per project |
| L3 | ~1-2K | Per task domain |
| L4 | ~2-5K | On demand |
| Total max | ~8K | Worst case |
vs. loading everything: ~30-50K tokens
Savings: 4-6x token reduction
instinct-loader -> feeds Layer 2 and Layer 3smart-memory-recall -> implements Layer 3 scoringintent-classifier -> triggers Layer 3 room selectiongraph-indexer -> powers Layer 4 deep search~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.