Talos Sells a Deterministic Permission Kernel Around Claude and Ships 2,242 Tests as the Proof

Talos (Show HN, 2026-08-28)·medium signalXBlueskyLinkedInCopy link

Talos launched on Show HN August 28 as a confined Claude worker where every tool call passes a path floor, immutable hardline rules, a sandbox and operator approval, and each granted effect is bound to its exact arguments, valid once, for thirty seconds. It declares 23 tools split into 15 free read tools, 5 write tools where reversible changes run automatically and irreversible ones require approval, and 3 exec tools that run sandboxed or are refused. The installer runs 2,063 unit tests and 179 adversarial cases on setup, and the makers state plainly that it defends against mistakes rather than a malicious model, which is a more honest scope statement than most agent-security marketing.