Expand description
memory4agent subservice (crates.io memory4agent 0.3, binary
memory4agent-server). On demand only: the server never starts it by
itself. It listens on loopback in 18200-18299, has no authentication, and is
never published to WireGuard or outside. The child runs with a scrubbed
environment so it never sees vault keys or tokens.