Skip to content

fix(memory): preserve guardrail redactions - #735

Merged
nborges-aws merged 3 commits into
mainfrom
nickdb/guardrail-redaction-release
Nov 6, 2026
Merged

nborges-aws merged 3 commits into
mainfrom
nickdb/guardrail-redaction-release

Conversation

@nborges-aws

@nborges-aws nborges-aws commented Nov 6, 2026 •

Copy link
Copy Markdown
Contributor

Description of changes:
Fix a case where Strands guardrail redaction could leave the original message in AgentCore Memory. This issue was seen on large messages stored as blobs or for messages flushed during batching.

The changes in this PR aim to address that with the following:

  • Read the event id from blob events, so a persisted message can be replaced with its redacted version
  • Correct buffered-message matching so redaction updates the intended message
  • keep the latest message in buffer during flushes, if it is still awaiting a guardrails decision (older messages are still sent, latest is sent when invocation completes)
  • Preserves message order if flush fails
  • deferred agent snapshots sent in groups of up to 100 (matching API constraint for max items)

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@github-actions

github-actions Bot commented Nov 6, 2026

Copy link
Copy Markdown
Contributor

✅ No Breaking Changes Detected

No public API breaking changes found in this PR.

@agentcore-devx-automation agentcore-devx-automation Bot added the claude-security-reviewing Claude Code /security-review in progress label Nov 6, 2026
@agentcore-devx-automation

Copy link
Copy Markdown
Contributor

Claude Security Review: no high-confidence findings. (run)

@agentcore-devx-automation agentcore-devx-automation Bot removed the claude-security-reviewing Claude Code /security-review in progress label Nov 6, 2026
@github-actions github-actions Bot added size/m PR size: M and removed size/m PR size: M labels Nov 6, 2026
@nborges-aws
nborges-aws merged commit 1da7aab into main Nov 6, 2026
44 of 47 checks passed

This branch was previously deployed

1 inactive deployment
auto-approve — b09ff9e5 Deployed Nov 6, 2026 by nborges-aws via Test (runtime) #1693
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/m PR size: M

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants