Letta (MemGPT) vs Lilith-Zero

“The primitive is clear: a persistence layer for agent state, exposed as an API with a managed runtime on top. The DX bet is that developers shouldn't have to implement vector store orchestration, memory write-back, and session replay themselves — and that bet is correct, because everyone who's built an agent past a demo has written that glue code and hated it. The Docker self-hosted path is the right call; it means you can evaluate locally without forking over credentials. My concern is API surface area — the framework has opinions about agent architecture that may not match yours, and adopting it wholesale is a bigger commitment than the landing page implies. Ships because the problem is genuinely unsolved at production scale, and the implementation shows someone who's actually hit this wall.”

“The Kani formal verification and cargo-fuzz integration tell me this isn't just a vanity security project—it's been engineered to actually be correct. Sub-millisecond overhead means there's no reason not to run this in front of every MCP agent deployment. 15 stars seems like an embarrassing undercount given what this does.”

“Category is stateful agent infrastructure; direct competitors are LangGraph's persistence layer, custom Redis/Postgres memory implementations, and whatever OpenAI ships natively in the Assistants API next quarter. The scenario where Letta breaks is multi-agent coordination with conflicting memory writes — nothing in the docs makes me confident that's solved, and that's exactly the workflow production teams hit first. What kills this in 12 months: OpenAI or Anthropic ships native long-term memory as a platform primitive, which they are both clearly building toward, and Letta's managed layer becomes redundant overnight. To be wrong about that, Letta needs to establish deep enough workflow integration and tooling ecosystem that switching costs exceed the platform's convenience. They're not there yet but the self-hosted path buys them time with the right buyers.”

“The claims are impressive but 15 GitHub stars and one maintainer is not a security tool I'd deploy in production. Security tools require adversarial testing by the community over time—not just formal verification. The fail-closed design is correct philosophically, but I'd want to see 6 months of battle-testing and independent security audits before trusting it with real agent deployments.”

“The thesis: within 2-3 years, stateless LLM calls will be as unacceptable in production as stateless HTTP was before cookies — every meaningful agent interaction requires accumulated context, and the teams that invest in memory infrastructure now will have compounding behavioral data their competitors can't replicate. What has to go right: model providers don't collapse this layer into their APIs fast enough to preempt an ecosystem, and agent deployment becomes standardized enough that a memory layer is a natural insertion point. The second-order effect nobody is talking about is that agents with persistent memory start generating longitudinal behavioral datasets that are genuinely proprietary — the memory layer becomes a data moat, not just a feature. Letta is early on the trend line of memory-as-infrastructure, not on-time, which means they have runway but also means they're educating the market before the market is ready to be educated.”

“This is the tool that enterprise security teams will demand before they let any AI agent touch production systems. The taint tracking model is particularly elegant—once data is tagged as sensitive, it can't flow to untrusted destinations regardless of what the LLM decides to do. This is the kind of principled security primitive the agentic ecosystem desperately needs.”

“The buyer is a backend engineer or AI infrastructure lead at a company shipping agent products, pulling from a dev tools or infrastructure budget — that part is clear. The problem is the pricing architecture: 'cloud pricing TBD' at production launch is a red flag, not a soft launch detail. You don't get to call something production-ready and leave the managed service price undisclosed; that's a sales motion pretending to be a product launch. The moat question is the real issue — long-term memory for agents is a feature, not a business, and every foundation model lab has it on their roadmap. Self-hosted Docker keeps enterprise customers who can't use managed cloud, but that's a services business, not a scalable SaaS margin story. Ships when they publish real pricing that scales with agent volume or user count in a way that grows with customer success, and when they can articulate a data or ecosystem lock-in that survives OpenAI shipping Assistants v3.”

“Way too deep in the Rust/MCP security weeds for me to evaluate or use. This is infrastructure for enterprise AI security teams—not something a content creator or indie builder will interact with directly. Worth knowing it exists; not something I'll try this week.”