
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
Stop repeating yourself to bots. Switch from Discord to Telegram? Your agent forgets your prefs, history, identity. That's the amnesia gap killing your workflow. Models route seamlessly (MCP), agents hand off (ACP)—but your context? Siloed and lost.
USRCP fixes it forever. The open protocol for agents to sync your state via a secure local ledger. Append in one app, query anywhere—your agent always knows you, no recap needed.
Why devs love it (already):
usrcp:// URIs standardize handshakes. MCP/ACP compatible—plug into your stack."USRCP is the missing link for human-AI continuity. No more 'who am I?' every session. Agents remember you across platforms." — Chad Garner, Creator
Proven in wild: 58 tests, tamper-proofed by Grok/Gemini/GPT audits. MIT licensed, battle-tested for indie agents.
npm i usrcp-sdk
// 1. Init your ledger (auto-encrypts local DB)
import { USRCPLedger } from 'usrcp-sdk';
const ledger = new USRCPLedger({ freeCap: 1000 });
// 2. Append context from Discord (or any channel)
await ledger.appendEvent({
type: 'user_pref',
data: { id: 'me', pref: 'dark_mode', value: true },
timestamp: Date.now(),
source: 'discord' // Track origin
});
// 3. Query anywhere—e.g., Telegram agent gets it instantly
const state = await ledger.getState({ filter: 'user_pref' });
console.log(state.myPrefs); // { dark_mode: true } — synced!
// 4. Resolve identity (anon-safe, cross-channel)
const me = await ledger.resolveIdentity('me');
console.log(me); // { pseudonym: 'user_xyz', events: 1, sources: ['discord'] }
Run the demo: npx usrcp-sdk test/demo.js — Simulates Discord→Telegram sync + tamper test. See your context flow in <10s. Outputs secure DB file ready to ship.
usrcp://append_event, usrcp://get_state, usrcp://resolve_identity. Hook into MCP/ACP flows.npm run build for prod. Full stubs in /examples/ (OpenAI/Grok).Built by indie devs, for indie devs. Drop USRCP in your agent—watch context sync like magic. What's your biggest AI memory pain? Reply below.
USRCP: Because your agent should know you better than you know it.
FAQs
USRCP SDK Prototype
We found that usrcp-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.