# AIStor Memory (aimem) RELEASE.2026-09-23T02-59-13Z

Released: 2026-09-23

A new `aimem history` command shows every version of a file in a Memory Bucket,
and which session wrote each one. `aimem cortex` is renamed `aimem bucket`; the
old name keeps working for now, but scripts that read the command's text output
should be checked before upgrading.

---

## Downloads

### Binaries

| Platform | Architecture | Download                                                                                                                             |
| -------- | ------------ | ------------------------------------------------------------------------------------------------------------------------------------ |
| Linux    | amd64        | [aimem.RELEASE.2026-09-23T02-59-13Z](https://dl.min.io/aistor/aimem/release/linux-amd64/archive/aimem.RELEASE.2026-09-23T02-59-13Z) |
| Linux    | arm64        | [aimem.RELEASE.2026-09-23T02-59-13Z](https://dl.min.io/aistor/aimem/release/linux-arm64/archive/aimem.RELEASE.2026-09-23T02-59-13Z) |

The setuid `aimem-fusermount` mount helper, the `aimem-bio` binary that
`aimem bio` runs, and the Kubernetes CSI node driver are published beside it:

| Binary             | Architecture | Download                                                                                                                                                   |
| ------------------ | ------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `aimem-fusermount` | amd64        | [aimem-fusermount.RELEASE.2026-09-23T02-59-13Z](https://dl.min.io/aistor/aimem/release/linux-amd64/archive/aimem-fusermount.RELEASE.2026-09-23T02-59-13Z) |
| `aimem-fusermount` | arm64        | [aimem-fusermount.RELEASE.2026-09-23T02-59-13Z](https://dl.min.io/aistor/aimem/release/linux-arm64/archive/aimem-fusermount.RELEASE.2026-09-23T02-59-13Z) |
| `aimem-bio`        | amd64        | [aimem-bio.RELEASE.2026-09-23T02-59-13Z](https://dl.min.io/aistor/aimem/release/linux-amd64/archive/aimem-bio.RELEASE.2026-09-23T02-59-13Z)               |
| `aimem-bio`        | arm64        | [aimem-bio.RELEASE.2026-09-23T02-59-13Z](https://dl.min.io/aistor/aimem/release/linux-arm64/archive/aimem-bio.RELEASE.2026-09-23T02-59-13Z)               |
| `aimem-csi-driver` | amd64        | [aimem-csi-driver.RELEASE.2026-09-23T02-59-13Z](https://dl.min.io/aistor/aimem/release/linux-amd64/archive/aimem-csi-driver.RELEASE.2026-09-23T02-59-13Z) |
| `aimem-csi-driver` | arm64        | [aimem-csi-driver.RELEASE.2026-09-23T02-59-13Z](https://dl.min.io/aistor/aimem/release/linux-arm64/archive/aimem-csi-driver.RELEASE.2026-09-23T02-59-13Z) |

Each binary has `.sha256sum`, `.minisig`, and `.asc` files at the same path.
These links point into `archive/`, where a release's files stay after a newer
release ships, so they always serve this build. The unversioned
`…/linux-{arch}/aimem` path serves whatever release is newest.

### Packages

`.deb`, `.rpm`, and `.apk` install the `aimem` client, the setuid
`aimem-fusermount` mount helper (`/usr/bin/aimem-fusermount`, mode 4755), and
`aimem-bio`. They also install a disabled example `mnt-aimem.mount` systemd
unit and the `/sbin/mount.aimem` helper it needs.

| Format | Architecture | Download                                                                                                                                    |
| ------ | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------- |
| DEB    | amd64        | [aimem\_20260923025913.0.0_amd64.deb](https://dl.min.io/aistor/aimem/release/linux-amd64/archive/aimem_20260923025913.0.0_amd64.deb)       |
| DEB    | arm64        | [aimem\_20260923025913.0.0_arm64.deb](https://dl.min.io/aistor/aimem/release/linux-arm64/archive/aimem_20260923025913.0.0_arm64.deb)       |
| RPM    | amd64        | [aimem-20260923025913.0.0-1.x86_64.rpm](https://dl.min.io/aistor/aimem/release/linux-amd64/archive/aimem-20260923025913.0.0-1.x86_64.rpm)   |
| RPM    | arm64        | [aimem-20260923025913.0.0-1.aarch64.rpm](https://dl.min.io/aistor/aimem/release/linux-arm64/archive/aimem-20260923025913.0.0-1.aarch64.rpm) |
| APK    | amd64        | [aimem\_20260923025913.0.0_x86_64.apk](https://dl.min.io/aistor/aimem/release/linux-amd64/archive/aimem_20260923025913.0.0_x86_64.apk)     |
| APK    | arm64        | [aimem\_20260923025913.0.0_aarch64.apk](https://dl.min.io/aistor/aimem/release/linux-arm64/archive/aimem_20260923025913.0.0_aarch64.apk)   |

The packages depend only on libc (`libc-bin` / `glibc-common`); no `libfuse` is
needed.

### Container Images

```bash
# The aimem client, pinned to this release:
docker pull quay.io/minio/aistor/aimem:RELEASE.2026-09-23T02-59-13Z

# The Kubernetes CSI node driver, pinned to this release:
docker pull quay.io/minio/aistor/aimem-csi-driver:RELEASE.2026-09-23T02-59-13Z
```

`quay.io/minio/aistor/aimem:latest` also points at this release, but moves when
the next one ships. To verify a build, pin the release tag or a `@sha256:`
digest, never `latest`.

Mounting from a container needs `/dev/fuse` and `CAP_SYS_ADMIN` (or
`--privileged`).

### Verification

Each binary is signed with minisign (preferred) and GPG, and has a sha256sum
file.

```bash
BASE=https://dl.min.io/aistor/aimem/release/linux-amd64/archive
curl -fsSLO $BASE/aimem.RELEASE.2026-09-23T02-59-13Z
curl -fsSLO $BASE/aimem.RELEASE.2026-09-23T02-59-13Z.minisig
curl -fsSLO $BASE/aimem.RELEASE.2026-09-23T02-59-13Z.sha256sum

# minisign
minisign -Vm aimem.RELEASE.2026-09-23T02-59-13Z \
  -P RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav

# sha256: the checksum file names the versioned binary, so keep that file name
sha256sum -c aimem.RELEASE.2026-09-23T02-59-13Z.sha256sum
```

The minisign public key above is the MinIO release-signing key, used across the
AIStor product line.

---

## Changes since RELEASE.2026-09-22T17-32-56Z

### New Features

- **`aimem history <bucket>/<key>` shows who wrote each version of a file.**
  For every version the Memory Bucket holds, it prints when it was written, the
  user who wrote it, and the agent session, which a mount records from its
  `--session-file`. Use it to find which agent run produced a file without
  opening the console. `--limit` and `--after` page through long histories,
  `--annotations` lists the annotations on the current version, and `--json`
  gives output for scripts. (#206)

### CLI Changes

"Cortex" was an internal name for a Memory Bucket. The CLI now says "Memory
Bucket" everywhere. (#206)

- **`aimem cortex` is now `aimem bucket`.** `aimem cortex` still works, but
  prints `` `aimem cortex` is deprecated; use `aimem bucket`. `` on stderr. A
  wrapper that merges stderr into stdout, or that fails on any stderr output,
  will see that line.
- **`aimem secret provision --cortex` is now `--bucket`.** `--cortex` still
  works as a hidden alias.
- **Text output has changed.** `no cortexes`, `deleted cortex <name>`,
  `<name> is already a cortex` and `<name> is now a cortex` now say "Memory
  Bucket" instead. Scripts that match this text should use `--json` instead.
- **Error messages have changed.** `cortex not found` and
  `cortex already exists` now read `Memory Bucket not found` and
  `Memory Bucket already exists`. When you try to mount a bucket that is not a
  Memory Bucket, the error now suggests `aimem bucket create`.
- The skill files installed on each mount, the command help, and `aimem-bio`'s
  help and errors use the new name. No `aimem-bio` command or flag changed.

### Platform / Compatibility

- Linux amd64 and arm64, glibc 2.34 or later.
- Mounting needs `/dev/fuse`. FUSE passthrough also needs `CAP_SYS_ADMIN`;
  without it, a mount serves ordinary FUSE reads.

---

## Security & Compliance

Software bills of materials (SBOMs) for this release, generated from the
`Cargo.lock` files at the release tag:

| Component          | SPDX                                                                                                                            | CycloneDX                                                                                                                     |
| ------------------ | ------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------- |
| `aimem`            | [aimem-RELEASE.2026-09-23T02-59-13Z.spdx.json](https://dl.min.io/aistor/aimem/release/notes/aimem-RELEASE.2026-09-23T02-59-13Z.spdx.json)         | [aimem-RELEASE.2026-09-23T02-59-13Z.cdx.json](https://dl.min.io/aistor/aimem/release/notes/aimem-RELEASE.2026-09-23T02-59-13Z.cdx.json)         |
| `aimem-bio`        | [aimem-bio-RELEASE.2026-09-23T02-59-13Z.spdx.json](https://dl.min.io/aistor/aimem/release/notes/aimem-bio-RELEASE.2026-09-23T02-59-13Z.spdx.json) | [aimem-bio-RELEASE.2026-09-23T02-59-13Z.cdx.json](https://dl.min.io/aistor/aimem/release/notes/aimem-bio-RELEASE.2026-09-23T02-59-13Z.cdx.json) |
| `aimem-csi-driver` | [aimem-csi-RELEASE.2026-09-23T02-59-13Z.spdx.json](https://dl.min.io/aistor/aimem/release/notes/aimem-csi-RELEASE.2026-09-23T02-59-13Z.spdx.json) | [aimem-csi-RELEASE.2026-09-23T02-59-13Z.cdx.json](https://dl.min.io/aistor/aimem/release/notes/aimem-csi-RELEASE.2026-09-23T02-59-13Z.cdx.json) |

The `aimem` dependency list is also published as plain text:
[crate list](https://dl.min.io/aistor/aimem/release/notes/aimem-RELEASE.2026-09-23T02-59-13Z.crates.txt)
and
[dependency tree](https://dl.min.io/aistor/aimem/release/notes/aimem-RELEASE.2026-09-23T02-59-13Z.cargo-tree.txt).

---

## Upgrade Instructions

- **Upgrading from a release before RELEASE.2026-09-22T17-32-56Z?** Read the
  [RELEASE.2026-09-22T17-32-56Z notes](https://dl.min.io/aistor/aimem/release/notes/release-notes-RELEASE.2026-09-22T17-32-56Z.md)
  too. They cover changes this release also contains, including the credentials
  a mount now needs for the `.aimem-lostfound/` prefix.
- **Update scripts to the new command names.** Replace `aimem cortex …` with
  `aimem bucket …`, and `aimem secret provision --cortex` with `--bucket`. The
  old names still work in this release but print a deprecation warning.
- **Check scripts that read text output or error messages.** Look for the words
  "cortex" or "cortexes" and switch the script to `--json`.
- **Memory Buckets named `bucket` or `history`.** `aimem bucket …` and
  `aimem history …` are now subcommands, so `aimem bucket /mnt …` or
  `aimem history /mnt …` no longer mounts a Memory Bucket with that name. Mount
  it with the URI form: `aimem s3://bucket/ /mnt …` or
  `aimem s3://history/ /mnt …`.
- **Kubernetes:** set the CSI node driver image to
  `quay.io/minio/aistor/aimem-csi-driver:RELEASE.2026-09-23T02-59-13Z`, which
  includes this `aimem`.

## Documentation

- Hosted docs: <https://docs.min.io/aimem/>

## Support

- Security disclosures: security@min.io
- Licensed customers and contributors: contact MinIO support.
