Talos 0.20 – A self-hosted AI agent with a permission kernel

Talos is an open-source, self-hosted AI agent for terminal and Telegram on macOS and Linux (including Raspberry Pi) that uses Ollama, the Claude Code CLI, or a configured API provider, and only executes tools after a deterministic permission kernel rules on each action, with authority bound to exact arguments as a single-use 30-second token. The 0.20.3 stable release adds native Telegram command blocks for known diagnostic arguments and separate measured result states, while retaining the frozen operator contract, permissions and dependency locks. The project states its limits plainly: shell execution requires bubblewrap or sandbox-exec and refuses to run unprotected otherwise, and it is not a multi-tenant security boundary.