This release is a pre-release and may not be stable for production use.
hongzhao
A file-based, human-gated memory ledger for AI coding agents.
Agents take notes constantly; most of those notes rot in chat logs. hongzhao gives your agent a small set of plain-text ledgers — claims, project contracts, knowledge entries — with deterministic validation and compilation. Nothing enters an agent's context until you (or a rule you wrote) say so.
- Plain files, no lock-in. Markdown + YAML under one root. No server, no database, no cloud.
- Two gates. Raw notes are candidates;
compileturns reviewed candidates into effective views. Candidates never leak into context. - Deterministic core. Validation, compilation and rendering are pure scripts; only semantic judgment (what is a fact, what supersedes what) belongs to the agent.
Status: pre-release (v0.1). Interfaces may change before
v0.1.0.
Install with your AI agent (one line)
Tell your coding agent (Claude Code, Codex CLI, ZCode, ...):
Read https://github.com/cmeng-CM/hongzhao/blob/main/docs/INSTALL.md and install hongzhao for me. My client is claude_code.
It will follow the agent install protocol and report a pass/fail table. Prefer typing yourself? Manual install is three commands.
Support matrix
| Status | |
|---|---|
| macOS / Linux | Supported (Python 3.9+; CI-tested on 3.12/3.13) |
| Windows native | Not supported — init fails fast (symlink-based skill linking; revisit in v0.2) |
| Python | 3.9+ (CI-tested on 3.12/3.13; single runtime dependency: PyYAML) |
| Preset clients | Claude Code, Codex CLI, ZCode (more via custom config in v0.1) |
| Install | pip / uv / pipx |
With / without
| Concern | Without hongzhao | With hongzhao |
|---|---|---|
| Agent notes | Scattered across chat logs, gone on close | Versioned raw records with schema and trace |
| What the agent "knows" | Whatever is pasted into the prompt | Compiled effective views, routed by task |
| Conflicting facts | Last message wins | Explicit relations (supersedes / conflicts) resolved at compile time |
| Onboarding a new agent session | Re-explain everything | One bootstrap block injected into the client file |
| Leaving the tool | — | Delete the managed block; your files remain plain markdown |
60-second quickstart
pip install hongzhao # or: uv tool install hongzhao
hongzhao init ~/my-memory --example
hongzhao --root ~/my-memory compile
hongzhao --root ~/my-memory validate
You now have a green demo kit: raw notes, a compiled index, and a rendered
bootstrap. Explore ~/my-memory/compiled/ — every view is plain markdown.
Daily loop:
hongzhao --root ~/my-memory validate # schema + containment checks
hongzhao --root ~/my-memory compile # rebuild derived views
hongzhao --root ~/my-memory doctor # client / blocks / output health
Agent installation block
Paste this into your agent client's instruction file (or let bridge-install
manage the block for you — see docs/clients.md):
# hongzhao memory routing
memory_root: ~/my-memory
Read compiled/bootstrap.md first; route tasks via compiled/effective-memory/index.md.
Never read raw/ except for evidence tracing. Run `hongzhao --root ~/my-memory compile`
after writing records; treat compile errors as stop signals.
How it works
raw/ (claims, dated truth) ──compile──▶ compiled/ (effective views)
registry/ + project contracts ──compile──▶ render/ (bootstrap, client blocks)
knowledge registry ──compile──▶ knowledge map
Five explicit relations between claims (supersedes, covers, derives, conflicts, resolves) replace "newest wins". See docs/claim-schema.md and the diagrams in docs/design.md.
Non-goals
- No MCP server, no vector search, no RAG, no auto-extraction, no web UI.
- No team sharing / multi-machine sync (single-writer by design).
- No Windows native support in v0.1.
- No background daemons — every command is explicit, every write is atomic.
Why-not
Approaches we deliberately did not take (and what to use instead):
- Vector DB / embeddings: file paths and titles already route a coding agent well; retrieval quality was not the bottleneck, review discipline was.
- Auto-summarization on every turn: unreviewed summaries are how memory rots; hongzhao makes candidates explicit and gates them.
- A server / API: a memory you cannot
grep, diff, and back up with git is not your memory. - An embedded database: merge conflicts and plain-text portability beat query power at this data scale.
Full documentation: docs/. Security model: SECURITY.md. Contributing (DCO required): CONTRIBUTING.md. Beta program: docs/beta.md.
License: Apache-2.0 — see LICENSE. 中文简介:README.zh-CN.md。
Metadata
Release files for hongzhao 0.1.0rc1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| hongzhao-0.1.0rc1.tar.gz | 58.3 kB | With provenance | Details for hongzhao-0.1.0rc1.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| hongzhao-0.1.0rc1-py3-none-any.whl | Python 3 | none | any | Details for hongzhao-0.1.0rc1-py3-none-any.whl |
Total release size: 122.2 kB
Release files / hongzhao-0.1.0rc1.tar.gz
| Download URL | hongzhao-0.1.0rc1.tar.gz |
|---|---|
| Size | 58.3 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
652fe644e3f88a7f4378d87703be66af145b4bca42289060d291f12ac8c5b34e
|
|
BLAKE2b-256 checksum How to use checksums |
aa3a9200151ad142e181f6d2d6579e83841a8c3c96742dbee89623f5013eb315
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 2, 2026.
Transparency logRelease files / hongzhao-0.1.0rc1-py3-none-any.whl
| Download URL | hongzhao-0.1.0rc1-py3-none-any.whl |
|---|---|
| Size | 64.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
beaaf102046d498cc124e24e8b6a68c46c900c88aac784648390f77543929a42
|
|
BLAKE2b-256 checksum How to use checksums |
f2ea2ad403612c9a561773a2fe4848195ddd8842238a7bc07bf8e9e27dd7f0f6
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 2, 2026.
Transparency logSecurity for hongzhao 0.1.0rc1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for hongzhao-0.1.0rc1.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 2, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.