The memory model, and what the approval gate actually holds
One table behind a LangGraph BaseStore, scope carried in the key, a read-only filesystem mount, and a middleware that puts approved rules on the system message. Plus the migration renumbering the release train forced, and an honest account of the one write path the gate does not structurally cover. Release notes 2026-09-16.