{"version":"2.1.284","anchor":"recalled-memories-are-passed-through-the-tag-neutralizer-bef","canonical_anchor":"recalled-memories-are-passed-through-the-tag-neutralizer-bef","heading":"Recalled memories can no longer pose as system instructions","tier":"notice","area":"Memory","url":"https:\/\/changelogs.core-directive.com\/v\/2.1.284\/e\/recalled-memories-are-passed-through-the-tag-neutralizer-bef","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.284","markdown":"### Recalled memories can no longer pose as system instructions\n\nMemories Claude pulls into a conversation now have system-style tags rewritten so a memory file cannot pass itself off as an instruction\n\n**What**\n\nMemories are notes saved in files that Claude can recall when they seem relevant. When Claude Code adds recalled memories to the conversation, it now runs the header and each memory's text through a filter first. The filter rewrites the openings of tags that Claude Code itself uses to mark system instructions, so text in a memory file cannot look like one of them.\n\n**Why**\n\nThis makes it harder for something written into a memory file to trick Claude by pretending to be a message from Claude Code.\n\n- Area: Memory\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 1\/5"}