Tree Ring Memory Claude Code Plugin is an instructions-only wrapper around the open-source Tree Ring Memory CLI.
- It does not run background services.
- It does not define Claude Code hooks.
- It does not ship a networked MCP server.
- It does not collect analytics.
- It does not ask for credentials, tokens, or API keys.
- It does not store raw chat transcripts.
Only store concise, useful memory. Do not store secrets, credentials, tokens, private keys, raw chain-of-thought, temporary scratchpad notes, unverified claims as durable truth, or private health, financial, legal, or personal identifier details without explicit user instruction.
Use tree-ring audit, tree-ring forget, redaction, and supersession when
memory is wrong, sensitive, stale, or replaced by newer evidence.
Tree Ring Memory Coordinated mode uses a one-time capability supplied
only through TREE_RING_COORDINATOR_TOKEN. Never place its value in a prompt,
CLI argument, memory event, log, source reference, committed file, or ordinary
worker environment. Tree Ring stores only a hash of the capability.
The policy is operational write authorization in official Rust and CLI paths. It is not a read ACL, an operating-system security boundary, or protection against an adversary who controls the database files or process environment. The supported shared-root boundary is cooperative processes on one host using a local filesystem; it does not establish cross-host or network-filesystem safety.
Tree Ring Memory v0.15 reports harness readiness from project-local configuration plus privacy-safe preflight receipts. Configuration alone is not activation. The plugin does not manufacture receipts, alter global trust, or hand-author Agent Zero activation capability descriptors.
Open a private vulnerability report on the canonical framework repository:
https://github.com/TerminallyLazy/Tree-Ring-Memory/security/advisories/new
Use the canonical issue tracker only for non-sensitive support:
https://github.com/TerminallyLazy/Tree-Ring-Memory/issues
Never include vulnerability details, secrets, tokens, private memory contents, or personal data in a public issue.