Version 3.3.0 pairs guarded Markdown edits with message review that does not claim work for an agent.
Guard a replacement
The release says memory_patch_page atomically appends or replaces a named Markdown section. It checks page identity and, for replacement, the section hash; stale edits leave the page unchanged. This makes a stale replacement a refusal rather than an overwrite.
Inspect the inbox
The inbox shows pending and sent messages without claiming them for an agent. Authorized users can edit a message until collection. These are release‑note descriptions, not an independent code audit.
Original explanatory diagram: replacement checks page identity and section hash; inbox viewing does not claim messages for an agent. Not a product interface.