talos-kernel/Talos

• agent_consult bounded advice from a second, operator-configured agent — data, never permission
• ask_operator the one way it can ask you something on purpose
• delegate a sub-run that can only read
• delegate_agy the same confined worker's second backend (the agy CLI): same trust form and workspace, behind its own opt-in gates on agent and worker, no…
• delegate_codex bounded implementation and independent review with Codex: the same kernel and sandbox, isolated auth, verified stream completion and origin…
• delegate_steer a course correction into a *running* /background task — a framed turn it reads at its next step, never a new right
• entity_status a known name resolved to an operator-configured fixed read-only probe
• git clone / fetch / pull / push with credentials — every op a human's yes, binding to exact op+repo+remote; local git work stays in the sandbox…
• http_request any REST API — read methods through the SSRF-hardened door, state-changing methods always a human's yes, binding to exact method+URL
• remote_exec a command on another machine over ssh — operator-allowlisted hosts, always a human's yes, standing rules bind to exact host+command
• run_shell a command, sandboxed, or refused where no sandbox exists
• session_search what was said in earlier turns
• skill_write a new skill, written exactly once — and never without a human's yes

view all →