Download Latest Version v3.34.0 -- AGNTCY_Outshift runtime integration source code.zip (35.4 MB)
Email in envelope

Get an email when there's a new version of Claude-Flow

Home / v3.33.0
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2026-07-30 1.6 kB
0
v3.33.0 -- ADR-377_ AgentDB Retrieval Security Layer source code.tar.gz 2026-07-30 31.6 MB
0
v3.33.0 -- ADR-377_ AgentDB Retrieval Security Layer source code.zip 2026-07-30 35.3 MB
0
Totals: 3 Items   67.0 MB 0

AgentDB Retrieval Security Layer (ADR-377)

Closes [#2516] / tracked in [#2873]: AgentDB's retrieval and write paths had zero certified defenses against memory poisoning (undefended attack success 93–100% per SMSR, arXiv:2606.12703). Full 3-phase implementation shipped in [#2874], all off by default until independently benchmarked.

  • AgentDbRetrievalGuard (@claude-flow/memory) — filters HNSW retrieval results through ToolOutputGuardrail's OWASP LLM01/LLM08 pattern scan before context assembly. CLAUDE_FLOW_RETRIEVAL_GUARD / _STRICT.
  • MemoryPoisonForensics (@claude-flow/hooks) — rolling-window z-score anomaly detection on AgentDB write sequences (write-interval, content-length). CLAUDE_FLOW_POISON_FORENSICS=0 to disable.
  • McpCallerIdentity (@claude-flow/security) — Ed25519 per-invocation capability tokens. CLAUDE_FLOW_MCP_CALLER_AUTH, off by default pending a follow-on key-distribution ADR.

Also in this release:

  • #2871 — consolidated 49 stale dream-cycle research proposals (open since 2026-05-29, never merged) into ADR-334 through ADR-376, resolving the ADR-147/ADR-179/ADR-320 numbering collisions along the way.
  • #2872 — recovered ADR-377 itself from an abandoned dream-cycle branch that never got a PR opened for it.

31 new tests across the three touched packages, zero regressions (memory 451, hooks 145, security 570 full suites re-run clean).

Packages

  • @claude-flow/cli@3.33.0
  • claude-flow@3.33.0
  • ruflo@3.33.0

🤖 Generated with Claude Code

Source: README.md, updated 2026-07-30