Technology
New open-source AI agent Talos introduces deterministic security kernel
The command-line assistant requires explicit human approval for irreversible actions and runs tool calls through a sandboxed permission layer.
The short version
- An open-source AI agent called Talos (version 0.15.1-alpha) has been released, featuring a deterministic security kernel between its language model and the shell.
- The system restricts tool usage by validating every command against a declared manifest, requiring human intervention for any irreversible actions.
- To ensure security, the software relies on platform-specific sandboxing and will refuse to execute if sandboxing is unavailable.
Key facts
- Talos 0.15.1-alpha is an open-source AI agent that utilizes a deterministic permission kernel situated between the language model and the shell to evaluate tool calls before execution.[Hacker News]
- The permission kernel authorizes individual effects for 30 seconds and prompts for human approval before executing any irreversible operations, such as writing files or touching secrets.[Hacker News]
- The agent enforces sandboxing using bubblewrap on Linux and sandbox-exec on macOS, and it refuses to run commands if a platform sandbox is unavailable.[Hacker News]
- Its installation script automatically runs 2,063 unit tests and 179 adversarial security tests to verify the system's behavior before completing setup.[Hacker News]
- To operate, Talos requires Python 3.11+, the Claude Code CLI, and explicit user definition of allowed principal identities via configuration.[Hacker News]
What remains uncertain
- The developer notes that Talos is not designed as a multi-tenant security boundary and does not protect against a malicious model, but rather against mistaken models or prompt injection.[Hacker News]