Homestead Memory MCP server

homestead-memory

<!-- mcp-name: io.github.fuckbigtech-ai/homestead-memory -->

Stop renting your mind.

A tamper-evident record of what your AI agent actually did, in a local file, that someone who does not trust you can verify. Tamper-evident, not tamper-proof: what it defends against and what it does not.

Agents fail quietly. The run reports success, the tool returns 200, and the thing you asked for did not happen. There is usually no record to contradict it. This keeps one, and every entry is hash-chained to the one before it, so see it catch a forged record, live:

<!-- Absolute URL, not docs/demo-watch.gif. This README is also the PyPI long_description, and PyPI cannot resolve repo-relative paths: it rendered a broken-image icon where the demo should be. GitHub resolves the absolute form fine, so one URL serves both. -->

pip install homestead-memory      # Python 3.10+, macOS / Linux / Windows

hsm watch --demo
#      0  14:02:11  Bash    npm test
#      1  14:02:19  Read    src/api/billing.py
#      2  14:02:24  Edit    src/api/billing.py
#
# ② now someone edits record 1…
#   !! chain break at index 1: hash_mismatch
#      record content does not match its own hash (edited in place)
#   exit 1  ·  gate it in CI like a test

Got No matching distribution found? macOS still ships Python 3.9 as its built-in

python3, and this needs 3.10+. Nothing is wrong with the package. Either use a newer

Python, or skip installing entirely:

uvx --from homestead-memory hsm watch --demo

(uv fetches a suitable Python for you.)

Record your own agent

hsm hook --install     # prints a Claude Code hook; you paste it, nothing is edited for you
hsm watch              # what your agent did, in order

Every entry is hash-chained to the one before it, so editing, deleting, or reordering any record breaks every hash after it. hsm watch reports the break at the exact index and exits non-zero. Sign it and a wholly rebuilt chain is caught too.

Both phases are recorded, which is what makes it evidence rather than a log. The hook captures the decision before a tool runs and the outcome after. A record of outcomes alone shows what happened; it cannot show that anything was authorised first. As the IETF Agent Audit Trail draft puts it, "a denial that is only logged after execution provides no evidence that the denial was enforced".

hsm export --format aat     # the same ledger as draft-sharif-agent-audit-trail-01

That draft maps explicitly to EU AI Act Article 12, and this emits it alongside the native format rather than replacing it, so nothing already on disk changes. Where we differ we say so: it specifies ECDSA P-256, which the AAT export uses, while the native EvidencePack stays Ed25519 so its verifier can remain standard-library only and a recipient needs nothing installed.

Shortened. The full README is on GitHub.