Talos

The real shell pipeline, running in this page: path floor → hardline → dangerous → effect . Type any shell command. Clean work runs, and every verdict is computed in front of you, with its reason. Nothing is sent anywhere.

The strength is the point, and it runs through the same gate as everything else. Nothing here is a promise; each line names the mechanism.

Hands a bounded coding task to a confined Claude worker that builds, runs the tests and, with browser: true , drives a browser inside the same sandbox. Double opt-in, off by default, writing only into a kernel-derived disposable workspace.

When a delegated job finishes, fails or times out, the origin chat gets a short factual message built from the worker record, never model prose.

A tag in the agent's own reply sends a generated file as a real chat attachment: kernel-derived roots only, capped at 20 MB and 4 files, and tool output can never forge one.

Installable automations in plain language: "every morning 08:30", never cron syntax. An installed blueprint is an ordinary schedule entry; the unattended ceiling applies unchanged.

Terminal, Telegram, mail over IMAP, WhatsApp through an operator-controlled broker over SSH. Every way in fetches; nothing opens a listening socket.