feat(399): 蒸馏窗口原始记录留存 + 记忆级溯源

README.md

@@ -10,7 +10,7 @@
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-3E63DD?style=flat-square" alt="license"></a>
   <a href="https://github.com/slow-stack/mneme/actions"><img src="https://img.shields.io/github/actions/workflow/status/slow-stack/mneme/ci.yml?style=flat-square&label=CI" alt="CI"></a>
   <a href="https://nodejs.org"><img src="https://img.shields.io/badge/node-22%2B-3E63DD?style=flat-square&logo=nodedotjs&logoColor=white" alt="node"></a>
-  <a href="https://github.com/slow-stack/mneme"><img src="https://img.shields.io/badge/tests-1687%20passed-3E63DD?style=flat-square" alt="tests"></a>
+  <a href="https://github.com/slow-stack/mneme"><img src="https://img.shields.io/badge/tests-1695%20passed-3E63DD?style=flat-square" alt="tests"></a>
   <a href="https://codecov.io/gh/slow-stack/mneme"><img src="https://img.shields.io/codecov/c/github/slow-stack/mneme/main?style=flat-square" alt="coverage"></a>
   <a href="https://github.com/awesome-dsh-plugin/awesome-dsh-plugin"><img src="https://awesome-dsh-plugin.com/badge.svg" alt="Awesome"></a>
 </p>
@@ -180,6 +180,7 @@ dsh-mneme-serve          # 默认 ~/.dsh/memory + 127.0.0.1:8790
 | stdio MCP server——Claude Code / Cursor 等任意 MCP 客户端接入记忆六件套 | [dsh-mneme/README.md · MCP Server](dsh-mneme/README.md#mcp-server任意-mcp-客户端接入) |
 | 独立服务 daemon（不开 DSH 常驻数据面） | [dsh-mneme/docs/DAEMON.md](dsh-mneme/docs/DAEMON.md) |
 | 配置说明（全键参考） | [dsh-mneme/docs/CONFIGURATION.md](dsh-mneme/docs/CONFIGURATION.md) |
+| 蒸馏原文留存与记忆级溯源（#399） | [dsh-mneme/docs/DISTILL.md](dsh-mneme/docs/DISTILL.md) |
 | 实体结构化设计 | [dsh-mneme/docs/ENTITIES.md](dsh-mneme/docs/ENTITIES.md) |
 | 语义架构 | [dsh-mneme/docs/SEMANTIC.md](dsh-mneme/docs/SEMANTIC.md) |
 | 本地模型部署指南 | [dsh-mneme/docs/LOCAL_MODEL.md](dsh-mneme/docs/LOCAL_MODEL.md) |
@@ -207,7 +208,7 @@ dsh-mneme-serve          # 默认 ~/.dsh/memory + 127.0.0.1:8790
 
 ```bash
 cd dsh-mneme && npm install
-npm test        # 1687 个测试
+npm test        # 1695 个测试
 npm run stress  # 三轴线压测
 npm run sync    # src → lib 同步
 ```
@@ -387,6 +388,7 @@ Community projects that wire mneme into more platforms — not part of this repo
 | stdio MCP server — plug the six memory tools into any MCP client (Claude Code / Cursor / …) | [dsh-mneme/README.md · MCP Server](dsh-mneme/README.md#mcp-server任意-mcp-客户端接入)（中文） |
 | Standalone daemon (serve memories without DSH) | [dsh-mneme/docs/DAEMON.md](dsh-mneme/docs/DAEMON.md)（中文） |
 | Configuration reference (all keys) | [dsh-mneme/docs/CONFIGURATION.md](dsh-mneme/docs/CONFIGURATION.md)（中文） |
+| Distill record retention & memory-level provenance (#399) | [dsh-mneme/docs/DISTILL.md](dsh-mneme/docs/DISTILL.md)（中文） |
 | Entity structure design | [dsh-mneme/docs/ENTITIES.md](dsh-mneme/docs/ENTITIES.md) |
 | Semantic architecture | [dsh-mneme/docs/SEMANTIC.md](dsh-mneme/docs/SEMANTIC.md) |
 | Local model guide | [dsh-mneme/docs/LOCAL_MODEL.md](dsh-mneme/docs/LOCAL_MODEL.md) |
@@ -414,7 +416,7 @@ Community projects that wire mneme into more platforms — not part of this repo
 
 ```bash
 cd dsh-mneme && npm install
-npm test        # 1687 tests
+npm test        # 1695 tests
 npm run stress  # three-axis stress test
 npm run sync    # src → lib sync
 ```

SECURITY.md

@@ -287,6 +287,7 @@ All audit data is stored **locally** in the plugin database and never leaves the
 | `failure_memories` audit logs | Local database | Every failed write is recorded; used for forensic analysis |
 | `recall_run` search logs | Local database | Every search is recorded with timestamp and query metadata |
 | AutoDream receipts | Local database + Markdown mirror | Cryptographically verifiable; persist until user deletes them |
+| `distill_records` raw window text (#399) | Local database | **Opt-in, off by default.** Only when `distillRecords.enabled: true`: the raw prompt/answer text of distilled windows is kept verbatim (no truncation), capped by `retentionDays` (default 90). Never includes private reasoning, plugin-injected content, tool arguments or tool output. Retention trims the text only — provenance links stay (they point at an empty range, shown as "source expired") |
 | Dependency scan reports | OrbisAI Security dashboard | Not stored on device |
 
 Retention is user-controlled: audit records live only as long as the local database does. There is no remote logging and no telemetry.
@@ -335,6 +336,13 @@ dsh-mneme:
   llmAudit:
     enabled: true
     retentionDays: 90
+
+  # Raw distilled-window text is off by default (data minimization).
+  # Turn it on only if you need to audit what a memory was distilled from:
+  # text is kept verbatim (untruncated), so enable a short retentionDays.
+  distillRecords:
+    enabled: false
+    retentionDays: 90
 ```
 
 ---
@@ -645,6 +653,7 @@ This project is licensed under the **MIT License**. See [LICENSE](https://github
 | `failure_memories` 审计日志 | 本地数据库 | 每次写入失败均记录，供取证分析 |
 | `recall_run` 搜索日志 | 本地数据库 | 每次搜索均记录时间戳和查询元数据 |
 | AutoDream receipts | 本地数据库 + Markdown 镜像 | 密码学可验证；保留至用户删除 |
+| `distill_records` 蒸馏窗口原文（#399） | 本地数据库 | **opt-in，默认关。** 仅当 `distillRecords.enabled: true` 时：被蒸馏窗口的用户提示与助手公开正文**逐字留存**（不截断），受 `retentionDays`（默认 90）约束。**绝不**包含私有推理链、插件注入的机器内容、工具入参与工具输出。到期裁剪只删原文，溯源链接保留（指向空区间，显示「来源已过期」） |
 | 依赖扫描报告 | OrbisAI Security 控制台 | 不存储于设备 |
 
 保留期由用户控制：审计记录仅随本地数据库存续。无远程日志、无遥测。
@@ -693,6 +702,13 @@ dsh-mneme:
   llmAudit:
     enabled: true
     retentionDays: 90
+
+  # 蒸馏窗口原文默认关闭（数据最小化）。
+  # 只有需要复核「一条记忆蒸馏自哪段对话」时才打开：
+  # 原文逐字留存（不截断），请同时设一个较短的 retentionDays
+  distillRecords:
+    enabled: false
+    retentionDays: 90
 ```
 
 ---