Talos — an AI agent with a permission kernel
talos 0.15.1-alpha · deterministic gate · MIT
Strong enough to hand a shell to.
Verifiable enough that you can. A real shell, a
confined Claude worker that builds, tests and browses for you, four chat channels.
Every tool call passes a deterministic security kernel before it runs: each effect
authorised individually, bound to its exact arguments, valid once, for
thirty seconds.
gate
run_shell
uptime
✓ ALLOW
clean — runs sandboxed, logged before it runs
2063unit tests
179/179adversarial
645lines ...
Read more at talos-agent.ch