Memora
Write path: the SDK AES-256-GCM encrypts the payload, pins ciphertext to IPFS via Pinata, submits a consensus-ordered sequence number to Hedera HCS, calls commitMemory() on a Hedera EVM registry contract, and registers the AES key with a challenge/response key broker — all in a single indexer write.
Read path: query the Supabase index for the memory reference, fetch ciphertext from IPFS, authenticate with the key broker via a signed challenge (key release gated by on-chain permission check), decrypt, then re-hash to verify payload integrity. Supabase is a rebuildable cache — the authoritative record is on-chain.