/brain:verify
Writes from untrusted sources — tool output, external content, or text that looks instruction-shaped — are held in a pending-verification state (see Provenance & Trust). verify is how they get resolved. Resolution is always the user's call; the agent never approves on its own judgment.
info
"Verify" is distinct from the spaced-repetition review queue (due_for_review). Verification is a one-time trust decision on a quarantined write; review is ongoing reinforcement scheduling.
Usage
brain verify list # pending memories (JSON)
brain verify show <id> # full frontmatter + body for inspection
brain verify approve <id> [<id>…] # clear the flag, mark vetted
brain verify reject <id> [<id>…] # archive (recoverable)What approval and rejection do
- Approve clears the quarantine flag and marks the memory
vetted. Itsorigin, write-time caps, and recall trust weighting all stay — approval means "a human looked; this is not an injection," not "this is now user-asserted." To fully trust it, re-store it withorigin: useror pin it explicitly. - Reject archives the memory to
~/.brain/_archived/(recoverable). Pass--forceonly if the CLI refuses a high-salience entry and you're sure.
Every approve and reject is written to the append-only audit log.
Related
brain audit— scans for poisoning patterns and can feed the quarantine queue.- Provenance & Trust — the full defense model.