chore: release main

[caura-deploy-bot]

🤖 I have created a release beep boop

backend: 3.18.0

3.18.0 (2026-09-23)

Features

• add dual-read service agent identities (step 1) (#1676) (1d8d55e)
• api: resolve tenant_id from the credential when a body omits it (#1634) (f496b27)
• clients: hold the memclaw-client name as a truthful redirect shell (0.5.1) (#1646) (5e2a3a9)
• contradiction: treat provenance and containment as single-valued (#1678) (352f616)
• documents: record which agent wrote a document (#1652) (1989376)
• enrichment: make the atomic-fact fan-out switchable per tenant (#1677) (4ab590f)
• mcp: bill the batch write, and count the verdicts nobody could determine (#1675) (0f3fd2b)

Bug Fixes

• agents: confirm a lookup miss against the primary before creating (#1647) (88e8a1b)
• agents: read the agent back from the primary after writing it (#1641) (2334d19)
• api: give an unmatched route the error envelope, and name the real ones (#1636) (c297e0e)
• api: let an agent credential's own identity fill an omitted agent_id (ax-0917-m-16) (#1696) (9311e43)
• api: make the request-budget 504 readable instead of {"detail":...} (#1633) (fe096f7)
• api: retire legacy service agent ids (step 3) (#1694) (c944bec)
• api: stop the plan quota from squatting on X-RateLimit-* (#1679) (6242aba)
• c-04: make the worker-path test able to fail, and close the review's remainder (#1682) (4c0b3bb)
• extraction: stop two surface forms clobbering each other's aliases (09/02 L-32) (#1681) (9e57349)
• idempotency: record the key even when the caller disconnects (ax-0917-h-09) (#1629) (33e9692)
• memories: make the expiry sweep cover expires_at (09/02 M-60) (#1692) (6230230)
• sentinel: point the memory-id stuffing check at the field Forge writes (09/02 L-35) (#1541) (3a5fccd)
• storage: migrate legacy service agent ids (step 2) (#1683) (f664d86)
• storage: report schema drift at startup (#1655) (8bf3012)
• storage: stop 044's post-condition claiming harm it does not cause (#1684) (64b3f54)

Performance

• extraction: upsert relations concurrently instead of one POST at a time (09/02 L-37) (#1543) (f99f7bf)
• recall: stop shipping the result set twice and the telemetry three times (#1557) (9e7c3bc)

Dependencies

• actions: bump the actions group with 6 updates (#1663) (c985da4)
• clients: bump @types/node from 26.5.1 to 26.6.1 in /clients/typescript in the clients-npm-minor-patch group across 1 directory (#1664) (58dc455)
• clients: update ruff requirement from <0.16,>=0.15.4 to >=0.15.4,<0.17 in /clients/python (#1576) (e56ac7e)
• docker: bump datadog/serverless-init from 2f498f4 to f494334 in /core-api (#1563) (ccbf60b)
• docker: bump datadog/serverless-init from 2f498f4 to f494334 in /core-operations (#1564) (5dbe7fb)
• docker: bump datadog/serverless-init from 2f498f4 to f494334 in /core-worker (#1565) (04f6b7b)
• plugin: bump @types/node from 26.5.1 to 26.6.1 in /plugin in the npm-minor-patch group (#1658) (b4c43f2)
• update cachetools requirement from >=7.1.8 to >=7.2.0 (#1661) (273ac33)
• update google-cloud-aiplatform requirement from <3,>=2.1.0 to >=2.1.3,<3 (#1660) (140a67a)
• update httpx requirement from <1,>=0.27 to >=0.28.1,<1 (#1566) (b3bd76d)
• update python-dateutil requirement from <3,>=2.8 to >=2.9.0.post0,<3 (#1567) (1871882)
• update sentry-sdk requirement from <3,>=2.69.1 to >=2.69.2,<3 (#1662) (bd4135e)
• update uvicorn requirement from <1,>=0.52.4 to >=0.53.0,<1 (#1659) (71c48de)

Reverts

• "fix(storage): apply the cross-link threshold outside the LIMIT" (#1639) (c06f215)

Documentation

• align setup and agent guides with live contracts (#1643) (c52d517)
• api: correct the fleet-less recall claim and name all four scope axes (ax-0917-m-19/m-20) (#1697) (8b235f7)
• documents: disclose that a doc write mints a memory (ax-0917-m-15) (#1695) (005e607)
• rebrand: classify remaining legacy names (#1674) (0d2d077)
• rebrand: classify skill and migration legacy names (#1671) (87f9bde)
• search: six cosine renders were two evaluations per row, not six (#1685) (e31b18c)

plugin: 2.23.1

2.23.1 (2026-09-23)

Dependencies

• plugin: bump @types/node from 26.5.1 to 26.6.1 in /plugin in the npm-minor-patch group (#1658) (b4c43f2)

Documentation

• align setup and agent guides with live contracts (#1643) (c52d517)
• api: correct the fleet-less recall claim and name all four scope axes (ax-0917-m-19/m-20) (#1697) (8b235f7)
• documents: disclose that a doc write mints a memory (ax-0917-m-15) (#1695) (005e607)
• rebrand: classify skill and migration legacy names (#1671) (87f9bde)

---

This PR was generated with Release Please. See documentation.

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[Eldad-Caura]

@codex

[github-actions]

Claude Code Review — skipped: PR author 'caura-deploy-bot[bot]' is not a public member of the 'caura-ai' org

[Eldad-Caura]

@codex

[Eldad-Caura]

@claude

[github-actions]

🤖 Review by Claude Code

Claude Code Review ✅ No issues found.

---

Reviewed by claude-sonnet-5 · cost $0.07291

[Eldad-Caura]

Fixed the release-bot ratchet failure by keeping the existing legacy-name-ok marker on the same JSON line as MEMCLAW_AGENT_ID. Current head 0efde564 is one signed commit; full CI, both legacy-name ratchets, sentinel, DCO, security, CodeQL, and image-version validation are green. Claude review found no issues.

[Eldad-Caura]

@erni-a

[caura-deploy-bot]

🤖 Created releases:

• backend-v3.18.0
• plugin-v2.23.1

🌻