Finding ·
First row to refuse all eight record-level edits on the read path: the Agent Memory reference runtime
Every canonical SQLite row is hashed into a bucketed Merkle digest, the governance log is chained, and open() fails closed on any mismatch, so T1 to T8 are refused before the agent reads anything. T9, the rollback of the whole store to an older genuine copy, is served: the generation anchor sits in a sidecar beside the database, so the restored copy opens as current with the newest memory gone. The maintainers accepted the row as external integrity evidence for T1 to T9 and pin the suite in their own CI (#639, #650).