lean-ctx 3.9.13

Context Runtime for AI Agents with CCP. 71 MCP tools, 10 read modes, 95+ compression patterns, cross-session memory (CCP), persistent AI knowledge with temporal facts + contradiction detection, multi-agent context sharing, LITM-aware positioning, AAAK compact format, adaptive compression with Thompson Sampling bandits. Supports 24+ AI tools. Reduces LLM token consumption by up to 99%.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

name = "soc2-context"
version = "0.1.0"
description = "SOC 2 TSC alignment for the context-pipeline slice: CC6.1 access restriction, CC6.6 boundary protection, C1.1 confidentiality redaction (mapping: compliance/mappings/soc2.toml)"
extends = "strict-redaction"

[context]
max_context_tokens = 16000
# Evidence window for a typical Type II reporting period.
audit_retention_days = 365
# CC6.6: external-boundary tools denied; path jail covers the read side.
deny_tools = ["ctx_url_read"]

[redaction]
# C1.1: confidential information beyond credentials — personal and
# financial identifiers commonly present in customer-data codebases.
date_of_birth = '(?i)\b(dob|date[ _-]?of[ _-]?birth)\b[ :=#]*\d{1,4}[-/.]\d{1,2}[-/.]\d{1,4}'
national_id = '\b\d{3}-\d{2}-\d{4}\b'
iban = '\b[A-Z]{2}\d{2}[A-Z0-9]{11,30}\b'
payment_card = '\b\d{4}[ -]?\d{4}[ -]?\d{4}[ -]?\d{1,7}\b'

[filters]
# CC6.7 / C1.1 (GL #675): personal & financial identifiers are redacted from
# tool output; prompt-injection in retrieved content is flagged for review.
pii = "redact"
injection = "warn"

[egress]
# CC6.6 boundary protection (GL #676): agent writes/actions carrying detected
# secrets or PII are blocked before they execute; rate is bounded.
block_secrets = true
max_writes_per_min = 240