Trust Console
Explore Zephr's recall, provenance, and contradiction surface.
Recalled beliefsquery: "auth middleware session validation"
b_8a3f · main
JWT verification must check exp + iat claims, not just signature validity. Missing exp check allows expired tokens.
b_c1e9 · main
Session cookies should be HttpOnly + Secure + SameSite=Lax. SameSite=None requires Secure in modern browsers.
b_d4b7 · feature/api-v2
Rate limiting middleware should use a sliding window with Redis, not in-memory Map. Map loses state on restart.
b_f2a1 · main
Postgres RLS policies must filter by workspace_id, not by auth.uid() alone. Tenant isolation requires explicit workspace scoping.
b_a5e3 · main
In-memory rate limiter is sufficient for single-instance deployments. Redis adds latency overhead that is unnecessary at low traffic.
Score decompositionhybrid mode
b_8a3f · hybrid · lexical + semantic
lexical0.82
semantic0.94
RRF fused0.91
total score0.91
b_c1e9 · hybrid · lexical + semantic
lexical0.71
semantic0.78
RRF fused0.74
total score0.74
b_f2a1 · hybrid · lexical + semantic
lexical0.45
semantic0.62
RRF fused0.53
total score0.53
Why panel — zephr_why b_8a3fT2 verified · 3 hops
Provenance chain
src/auth/middleware.ts:42
File-line anchor recorded during coding session
File-line anchor recorded during coding session
session s_4f2a · worktree main
Belief created in session 4f2a, worktree main, 2026-07-10T14:22:00Z
Belief created in session 4f2a, worktree main, 2026-07-10T14:22:00Z
T2 consistency verified · 2026-07-10T15:01:00Z
Structural checks passed + cross-reference validated against 2 evidence anchors
Structural checks passed + cross-reference validated against 2 evidence anchors
Contradictions
✓ No contradictions for this belief.
Contradictions in corpus
b_d4b7 (Redis rate limiting) contradicts b_a5e3 (in-memory rate limiting). Both are unreviewed. Zephr would abstain from either until review resolves the conflict.
MCP tool surface8 tools · frozen
| Tool | Purpose |
|---|---|
| zephr_remember | Capture a belief with provenance anchored to a worktree session |
| zephr_recall | Hybrid lexical + semantic retrieval with structured abstention |
| zephr_why | Explain provenance, version history, contradictions, supersessions |
| zephr_verify | T1 structural and T2 consistency checks; classified verdict |
| zephr_session | Session lifecycle and recent-belief handoff summarisation |
| zephr_rules | Read/write worktree review and contradiction policies |
| zephr_status | Service identity, embedding capability, retrieval modes, storage stats |
| zephr_admin | Capability-gated stats (read-only) plus purge and migrate (destructive) |