GoKawiilTalos open-sources an AI shell agent with a deterministic permission kernel
A developer released Talos, version 0.15.1-alpha, an MIT-licensed AI agent that pairs a sandboxed Claude-based worker with real shell access for building, testing, and browsing tasks. Every action the agent attempts is checked by a separate deterministic security kernel that authorizes each tool call individually, tying it to exact arguments and letting it run only once within a thirty-second window.
GoKawiil's interpretation of the reporting above, not reported fact.
Giving AI agents direct shell access is powerful but risky, since a single bad or malicious command could cause serious damage. By inserting a strict, auditable permission layer between the model and the system, Talos aims to make agentic automation safer without sacrificing capability, a design pattern likely to influence how other autonomous coding agents handle security.
- Talos is an open-source, MIT-licensed AI agent granting sandboxed shell access.
- A deterministic security kernel authorizes each tool call individually before execution.
- Permissions are tightly scoped: exact argument matching, single-use, and a 30-second validity window.
Raspberry Pi 5 8GB single-board computer — If you're going to hand a shell to an AI agent, do it on a machine you can wipe in minutes — a Raspberry Pi 5 makes a great isolated sandbox host for experiments like Talos. It runs a full Linux environment, sips power, and you can keep the whole OS on a swappable microSD card. Perfect for testing permission-gated tool calls without touching your main workstation.
See Raspberry Pi 5 8GB single-board computer on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: talos-agent.ch, 2026-08-28
Published there as: “Show HN: Talos – An AI agent with a permission kernel between model and shell”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.