If you use more than one AI coding agent, you have probably re-explained the same project to each of them. Aletheia is a free, local memory and rules hub for that problem: one SQLite store on your machine that Claude Code, Codex CLI, Cursor, Gemini CLI, Windsurf and OpenCode read over MCP, REST or the CLI. It is alpha software, Apache-2.0, with no account and no telemetry.

For 0.2.0 we did something different from adding features one by one. We ran a full gap scan, both of our own code and of claude-mem, the larger and older project in this space, and turned every finding into a task with a test that had to fail before the fix and pass after it. 28 tasks came out of it. Here is what they found and what changed.

A security hole in remote mode

The most important finding was not a missing feature. When the server was bound to a non-loopback address with no ALETHEIA_API_KEY , the Hub login protected the dashboard ( / and /api/* ) but not the API the tools use.…