What
Shared memory stores, previously documented as unsupported outside Anthropic-hosted sandboxes, now work on your own infrastructure. The Python, TypeScript, and Go worker downloads each attached store to /mnt/memory/<store-name>/ and re-syncs it on an interval, default 15s with a 5s floor, tunable via memory_sync_interval / memorySyncIntervalMs / MemorySyncInterval. Deletion handling is set by memory_sync_deletes (enabled default, log_only, disabled).
Details
- It is a periodic copy, not a live mount: writes become visible to other sessions only after a sync, and conflicts resolve in favour of the store.
read_onlyis enforced by the worker's own tools, not by filesystem permissions, and memory files are opened withO_NOFOLLOW.- A new per-session credential,
ANTHROPIC_WORK_SECRET, must be forwarded into sandbox-per-session containers. - The
antCLI worker does not mount stores at all. memory_storeis the only resource type self-hosted environments accept.
Evidence
the worker opens memory files with O_NOFOLLOW``
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Names in the bundlememory_sync_intervalmemorySyncIntervalMsMemorySyncIntervalmemory_sync_deletesANTHROPIC_WORK_SECRET