Memory OS is a local Hermes Agent memory stack with Qdrant, SQLite FTS5, structured facts, and a layer that tells the agent to treat injected memory as authoritative. That design is worth a security read because the repo itself names context injection, backtick sanitization, system injection filtering, and a one-command installer as part of the operating surface, while the retained material does not prove how those controls behave under hostile input.