LPM treats this as warn-only first-party agent extension lifecycle risk. Pi extension automatically sends normalized user/assistant session text to the configured Ormah service and injects its recall response before prompts. Its default service is loopback; setup guidance mutation requires an explicit confirmed command.
Static reason
No blocking static signals were detected.
Trigger
Pi extension load; session compaction/shutdown; explicit /ormah:setup or /ormah:upgrade.
Impact
Session content is persisted by the configured Ormah server; confirmed setup may change Pi guidance.
Mechanism
agent memory extension with local HTTP transcript storage and guarded CLI setup
Rationale
No concrete malicious chain was found, but this is a privileged agent extension that automatically handles session content and offers confirmed agent-configuration setup. Per policy, this is a guarded extension-lifecycle risk rather than a publish-block case.
Evidence
package.jsonormah-pi.tssrc/store.tssrc/client.tssrc/config.tssrc/commands.tssrc/space.tssrc/whisper.ts