Goose 1.52.0 requires consent before a recipe spawns extensions.

Live voice conversations in the desktop app, support for Opus 5.5, GPT-6-sol and GPT-6-luna. On security: recipes need consent before session/new spawns extensions, and the roaming TCP bridge is opt-in. New recipe limits cap parameters at 32, select options at 200 and total size at 128 KiB (GitHub). A recipe silently spawning extensions was exactly the kind of trust gap the security section keeps finding elsewhere.