Read the discussion on HN. A full-thread summary is not available yet.
talos-kernel
Talos
Python2026–2026
talos-kernel / Talos
Talos
Open-source, self-hosted AI agent for terminal, Telegram and Raspberry Pi. Local Ollama or Claude/Codex workers, enforced by a deterministic capability kernel, scoped approvals and an audit trail.
AI & Machine LearningCommand LineSystems & InfrastructureSecurity & PrivacySelf-hostedHardware & EmbeddedCommunication & Social
2Distinct people
4Mentions
0Explicit recommenders
16GitHub stars
What to know before exploring
What it is
Open-source, self-hosted AI agent for terminal, Telegram and Raspberry Pi. Local Ollama or Claude/Codex workers, enforced by a deterministic capability kernel, scoped approvals and an audit trail.
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 1:49:46 PM UTC.
Mentions over time
HN mentions by week4 dated mentions
Observed mentions: 2026-08-14 23:18:48 UTC to 2026-11-01 16:51:11 UTC. Weeks start Monday, UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| Aug 10 | 2026-08-10 00:00:00 UTC | 2026-08-17 00:00:00 UTC | 1 | 1 | 0 |
| Aug 17 | 2026-08-17 00:00:00 UTC | 2026-08-24 00:00:00 UTC | 0 | 0 | 0 |
| Aug 24 | 2026-08-24 00:00:00 UTC | 2026-08-31 00:00:00 UTC | 1 | 0 | 1 |
| Aug 31 | 2026-08-31 00:00:00 UTC | 2026-09-07 00:00:00 UTC | 0 | 0 | 0 |
| Sep 7 | 2026-09-07 00:00:00 UTC | 2026-09-14 00:00:00 UTC | 0 | 0 | 0 |
| Sep 14 | 2026-09-14 00:00:00 UTC | 2026-09-21 00:00:00 UTC | 1 | 1 | 0 |
| Sep 21 | 2026-09-21 00:00:00 UTC | 2026-09-28 00:00:00 UTC | 0 | 0 | 0 |
| Sep 28 | 2026-09-28 00:00:00 UTC | 2026-10-05 00:00:00 UTC | 0 | 0 | 0 |
| Oct 5 | 2026-10-05 00:00:00 UTC | 2026-10-12 00:00:00 UTC | 0 | 0 | 0 |
| Oct 12 | 2026-10-12 00:00:00 UTC | 2026-10-19 00:00:00 UTC | 0 | 0 | 0 |
| Oct 19 | 2026-10-19 00:00:00 UTC | 2026-10-26 00:00:00 UTC | 0 | 0 | 0 |
| Oct 26 | 2026-10-26 00:00:00 UTC | 2026-11-02 00:00:00 UTC | 1 | 1 | 0 |
What Hacker News says
4 sourcesKUkurdman_007·Nov 1, 2026Submission
Talos 0.20.0-RC.2 – Security release candidate
1 points · Open discussionShow HN: Talos – A personal agent whose kernel gates every tool call
2 points · Open discussionHi HN — maker here. I built Talos because I wanted to hand an agent a terminal without handing it my trust model. Every tool call (read, write, exec, delegate) passes a small deterministic kernel, ~645 lines of Python, that returns allow, needs-human or deny. Unattended runs can't ask, so needs-human becomes deny. The agent can never grant itself anything.
Around that kernel: 23 gated tools, a UID-separated worker for delegated code, MCP servers confined to that worker from an operator-owned registry (no marketplace, no third-party code in the agent process), a hash-chained audit log, Ed25519-signed updates verified before anything unpacks, and a read-only live dashboard that has no approve button, by design.
Numbers the CI enforces on every page of the site: 2063 tests, 179/179 adversarial cases, 645 kernel lines, 0 inbound ports. The si
Read the rest
te has a browser reimplementation of the policy kernel you can poke at without installing anything, a replayed real session, and an honest comparison to OpenClaw and Hermes — including what Talos doesn't have (breadth; that's doctrine, not backlog).
Happy to answer anything — especially the parts where the design is wrong.
Site: https://talos-agent.ch — Source (MIT): https://github.com/talos-kernel/talos