From effdd25e93e133406c895e3b12dad7e974396918 Mon Sep 17 00:00:00 2001 From: Talos Maintainers Date: Sat, 24 Oct 2026 12:23:25 +0200 Subject: [PATCH 1/2] release: prepare signed beta.6 skill management and security update --- CHANGELOG.md | 17 ++++++++++++++--- CLAUDE.md | 3 +-- README.md | 2 +- site/console.html | 6 +++--- site/docs/index.html | 2 +- site/index.html | 4 ++-- site/install.sh | 2 +- site/status.json | 8 ++++---- talos/__init__.py | 2 +- 9 files changed, 28 insertions(+), 18 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f7d51c6..55610a8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,13 +7,24 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). The 0.20.0 beta line follows the frozen operator contract; earlier alpha releases remain historical snapshots. Beta does not mean error-free operation. -## [Unreleased] +## [0.20.0-beta.6] — 2026-10-24 ### Security - Raise the transitive `filelock` floor to 4.2.1 and pin 4.2.4 with hashes, replacing - vulnerable 3.32.5. No unrelated dependency upgrades. This source change does not - replace the existing signed Beta.5 archive or its package-manager installations. + vulnerable 3.32.5 in the signed release and package-manager installations. + No unrelated dependency upgrades. + +### Added + +- Managed skill creation, editing, patching, support files, deactivation and + content-addressed restoration through `skill_view` and `skill_manage`. +- Each skill mutation requires fresh human approval; standing and task-wide grants + cannot authorize it. Expected hashes reject stale edits, and bound targets prevent + model-supplied paths from bypassing the kernel. +- Action-specific approval previews show the actual change, redact secrets and bind + truncated values to their complete hash. Unattended skill writes remain denied. +- Explicit Claude Opus 5.5 CLI model selection. ### Documentation diff --git a/CLAUDE.md b/CLAUDE.md index e6ea39d..85d1512 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -31,8 +31,7 @@ skills. All mutations remain irreversible WRITE tools requiring human approval; runs deny them. Expected hashes reject stale changes, and content-addressed history supports restoration. Delete deactivates `SKILL.md`, retaining support files and history. Skills are untrusted guidance loaded on demand, never permission. See `talos/skillmanage.py` and the -README for bounds and the external-editor race limitation. These source additions do not -change the contents of the already signed Beta.5 release. +README for bounds and the external-editor race limitation. These capabilities ship in the signed Beta.6 release. Beta.5 introduced [missions and projects](docs/missions.md), `/continue`, outcome receipts and a loopback local-model check. Mission templates and saved project context diff --git a/README.md b/README.md index 38ed54c..66318da 100644 --- a/README.md +++ b/README.md @@ -376,7 +376,7 @@ come from `stdin` instead of `getUpdates`. ``` $ talos chat - ◉ Talos / 0.20.0-beta.5 + ◉ Talos / 0.20.0-beta.6 Your terminal. Your rules. ────────────────────────────────────────────────────────────────────────── model claude-cli/claude-opus-4-1 diff --git a/site/console.html b/site/console.html index c169dd2..44aa9e5 100644 --- a/site/console.html +++ b/site/console.html @@ -365,7 +365,7 @@
-

talos 0.20.0-beta.5 · operator console · MIT

+

talos 0.20.0-beta.6 · operator console · MIT

recorded · unfurled · no live wire

Witness one deed from door to ledger.

This hall unfurls one true session, recorded on the working machine @@ -553,12 +553,12 @@

Numbers this candidate must ship.

embedded below. Either way the digits come from a count, not from memory.

-
0.20.0-beta.5
beta release
public installer v0.20.0-beta.5
+
0.20.0-beta.6
beta release
public installer v0.20.0-beta.6
3428
automated tests, collected by pytest
277
adversarial cases, all behaving
996
lines in policy.py, readable in one sitting
37
tools, every one through the gate
-
v0.20.0-beta.5
release tag
+
v0.20.0-beta.6
release tag
diff --git a/site/docs/index.html b/site/docs/index.html index ff84eb5..0dfb5f0 100644 --- a/site/docs/index.html +++ b/site/docs/index.html @@ -407,7 +407,7 @@

Section 04Run it

Section 05The terminal session

$ talos chat
-Talos 0.20.0-beta.5  ·  anthropic-api/claude-opus-4-8  ·  autonomy 3
+Talos 0.20.0-beta.6  ·  anthropic-api/claude-opus-4-8  ·  autonomy 3
 speaking as cli:1000  ·  approvals possible  ·  you are at a terminal
 /help for commands, `exit` to leave
 
diff --git a/site/index.html b/site/index.html
index 236ae9f..7c7d961 100644
--- a/site/index.html
+++ b/site/index.html
@@ -638,7 +638,7 @@ 
The bounds are named.

     
Measured, with the path stated

     
None of this asks for belief. The installer runs the unit and
     adversarial suites in front of you; the real-model cases are a separate opt-in E2E run.

-    
Source tree based on 0.20.0-beta.5, including unreleased fixes. Counts describe the source test suite, not speed or real-world success rates; signed release contents follow their tag.

+    
Beta.6 source and signed release. Counts describe the source test suite, not speed or real-world success rates; signed release contents follow their tag.

       
0
automated tests collected from the source tree

       
0
adversarial cases trying to pass the kernel

       
0
opt-in end-to-end cases against a real model

@@ -764,7 +764,7 @@ 
Talos AI agent: your questions

   

     
raise the keep

     
The command remains yours

-    
Beta release 0.20.0-beta.5. Tested on Python 3.11 · 3.13, Linux and macOS, including Raspberry Pi.
+    
Beta release 0.20.0-beta.6. Tested on Python 3.11 · 3.13, Linux and macOS, including Raspberry Pi.
     Bring your own model: a supported CLI, configured API provider or local Ollama.
     The installer runs the unit and adversarial suites in front of you, then starts nothing.

     

diff --git a/site/install.sh b/site/install.sh
index 4f21eed..16f1746 100755
--- a/site/install.sh
+++ b/site/install.sh
@@ -15,7 +15,7 @@
 
 set -euo pipefail
 
-VERSION="0.20.0-beta.5"
+VERSION="0.20.0-beta.6"
 BASE="${TALOS_BASE:-https://talos-agent.ch}"
 TARBALL="${BASE}/dist/talos-${VERSION}.tar.gz"
 PREFIX="${TALOS_PREFIX:-$HOME/talos}"
diff --git a/site/status.json b/site/status.json
index 97debad..0de1bc0 100644
--- a/site/status.json
+++ b/site/status.json
@@ -1,11 +1,11 @@
 {
-  "version": "0.20.0-beta.5",
+  "version": "0.20.0-beta.6",
   "release_state": "released",
-  "source_state": "unreleased_changes",
-  "installer_version": "0.20.0-beta.5",
+  "source_state": "release",
+  "installer_version": "0.20.0-beta.6",
   "tests": 3428,
   "redteam_faelle": 277,
   "kernel_zeilen": 996,
   "werkzeuge": 37,
-  "release_ref": "v0.20.0-beta.5"
+  "release_ref": "v0.20.0-beta.6"
 }
diff --git a/talos/__init__.py b/talos/__init__.py
index afe31a7..9eb7d94 100644
--- a/talos/__init__.py
+++ b/talos/__init__.py
@@ -8,4 +8,4 @@
 advertised and a released package is never left behind.
 """
 
-__version__ = "0.20.0-beta.5"
+__version__ = "0.20.0-beta.6"

From dd9b39af20b49863ba7c3b638003a3d1caba26e0 Mon Sep 17 00:00:00 2001
From: Talos Maintainers 
Date: Sat, 24 Oct 2026 12:26:28 +0200
Subject: [PATCH 2/2] docs: describe shipped beta.6 instead of obsolete
 unreleased pins

---
 README.md | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/README.md b/README.md
index 66318da..c4bbe1d 100644
--- a/README.md
+++ b/README.md
@@ -67,9 +67,12 @@ checks. Resume saved project context with `/continue` and inspect recorded outco
 with `talos proof`. Templates grant no extra permissions; external sends and protected
 actions retain their existing gates.
 
-**Source versus release:** `main` can contain fixes newer than the signed installer.
-The [unreleased changelog](CHANGELOG.md#unreleased) records the `filelock` security
-update; the existing Beta.5 archive and Homebrew package retain their published pins.
+**New in beta.6:** Talos can create, edit and restore managed skills, including support
+files, with a fresh approval for every change. This release also ships the `filelock`
+security update. See the [changelog](CHANGELOG.md#0200-beta6--2026-10-24).
+
+**Source versus release:** `main` can contain newer changes. Signed installers and
+package managers follow their pinned release; older archives remain immutable.
 
 ## Is Talos right for you?