01 / ADVISORIES
ECHOS advisories
Vulnerabilities in self-hosted MCP servers and agent infrastructure, published after vendors have had time to fix them. Each ships with the reproduction, the CVE or GHSA identifier, and the timeline.
Q4 2026
Advisories & publication queue
Findings
Nothing published yet; the queue below is the commitment. Each advisory and finding gets a permanent URL here when it ships, carrying its CVE and GHSA identifiers, so it can be linked and cited. What was queued and then dropped stays on this page too, marked as such.
In the queue
Archived, never published
A1 / CODE
dreamd and the State-Drift harness
The benchmark code and the dreamd memory daemon, planned for publication ahead of any results claimed on them. Archived before that release; nothing went out.
Archived August 2026
A2 / BENCHMARK
State-Drift Benchmark results
Full runs of Mem0, Zep, Letta, Anthropic's memory tooling, and dreamd on the public harness. The runs were never published, and no scores from them are cited anywhere on this site.
Archived August 2026