Gnosis v1.4.0 — Terms v2, acceptance record, notify-only updates

Gnosis v1.4.0 records Terms acceptance somewhere other than your own machine, and stops installing updates behind your back.

⚠️ Windows will probably flag this installer

This is expected, and it is a false positive. The installer is not code-signed yet.

Bitdefender flags it as Atc4.Detection — a behavioural heuristic, not a named virus signature. An unsigned installer that unpacks itself into %TEMP% and runs code from there looks, to a heuristic engine, exactly like a dropper. It will keep being flagged until the installer is signed by a verified publisher.

If your antivirus quarantines it:

1. Add an exception for your Downloads folder and the Gnosis install directory before re-downloading.
2. In Bitdefender: Protection → Antivirus → Open → Settings → Manage exceptions → Add exception.
3. Then install again.

If it already quarantined a file mid-install, the antivirus may hold a lock on that exact path even after you add the exception — a reboot releases it.

SHA-256 of Gnosis-Setup-1.4.0.exe:

320B09485CC8AD0CC8633A19FFA4D0B357C41FB17A635CC8C98FAC1418F92E18

Updates are now notify-only

Gnosis no longer downloads or installs updates in the background. It checks on launch and every six hours, and when a newer version exists it tells you — in the app and in a Windows notification — and links here.

This is a deliberate trade. A silent background download of an unsigned installer does not produce a stale app; it produces a quarantined payload, a shortcut pointing at nothing, and no reason to connect the antivirus alarm to Gnosis. A user who ignores an update reminder is on an old build. A user whose antivirus interrupts a silent install is on a broken one. The second is much worse.

This reverts once the installer is signed.

If you are on a build older than v1.2.0, reinstall manually

Older builds shipped with autoInstallOnAppQuit = false, which did not mean "ask first" — it meant discard. Gnosis downloaded the update, showed a toast, and threw the staged build away if you closed the app without clicking Restart, then re-downloaded ~120MB next launch to delete it again.

That bug is in your installed copy, so its updater cannot rescue itself. Download the installer below once, and updates work normally from then on.

Terms of Use — Version 2

Version 1 said the project collected nothing and ran no servers. That is no longer true, and this release is where it changed.

When you press Accept — and at no other time — one record of that acceptance is sent to a server we operate. It contains exactly: a random installation id, the Terms version, a checksum of the exact text you were shown, the app version, the timestamps, and an email address only if you choose to type one (the field is optional and blank by default).

That is the entire list. There is no second call, no heartbeat, no usage reporting, no analytics. We do not know when you run Gnosis, what you ask it, or whether you are still using it. If you never accept, nothing is sent at all.

Why: a record of acceptance kept only on your computer is a record you can edit. A copy stays on your machine at ~/.dom/acceptance.json so you can always see what was recorded.

Everything else is unchanged: prompts, files, keystrokes and recordings never reach us. Gnosis still talks to OpenRouter, Groq, Brave and GitHub using your keys, under their terms.

Because §5 changed materially, you will be asked to accept again on first launch.

Also in this release

• Voice is on by default, disclosed on first run.
• Acceptance is keyed to a checksum of the exact text shown, not a version string — editing the Terms invalidates prior acceptance rather than silently recording people as having agreed to words they never saw.
• Acceptance is recorded locally first and always; if the server is unreachable the record queues and retries. Being offline never blocks acceptance and never loses it.

Full verification: 137/137 suites passing.

Gnosis 1.3.0

Terms of Use, voice on by default, and updates that actually install.

Install

irm https://raw.githubusercontent.com/DOMCHURCH/Gnosis/master/scripts/install.ps1 | iex

Updates now actually land

autoInstallOnAppQuit was false, which does not mean "ask first" — it means discard. Gnosis downloaded each update, showed a toast, and if you closed the app without clicking Restart it threw the build away and re-downloaded 120 MB next launch to delete it again. Anyone who never clicked that button was pinned on their original install forever.

A staged update now installs when you quit. Nothing yanks a running agent out from under you — only your Restart click restarts a live app. It also re-checks every 6 hours instead of once at launch.

Terms of Use, and a record that proves it

New TERMS.md, shown on first run and after feature releases: what the agent can do, that its safeguards are best-effort rather than guarantees, that you're responsible for what you instruct it to do, no warranty, limited liability.

Acceptance is recorded in ~/.dom/acceptance.json — keyed on a sha256 of the exact text you were shown, not a version number, so editing the document by one byte re-prompts rather than leaving you recorded as agreeing to words you never saw. Append-only, with a copy of the accepted text so the checksum stays verifiable.

Nothing about it is sent anywhere. Recording acceptance on a server would mean collecting data about every install — exactly what the terms promise not to do.

Voice is on by default

Previously off and invisible unless you happened to know the wake phrase. Now on — but nothing listens until after the welcome window has told you it's live, what's sent where, and given you a switch to turn it off without leaving that window.

The window also offers the one-time openWakeWord + Kokoro download (~350 MB, free, local) when they aren't installed, since voice being "on" means nothing if the Python side was never set up.

Honest about the trade: wake-word detection runs entirely on your machine and no audio leaves it while it's just listening. Only what you say after "hey jarvis" is recorded and sent to Groq for transcription. Don't leave it on where others could be recorded without consent.

Also

• Whisper detection: the speech gate was a fixed threshold that discarded anything quieter than normal speech. It's now measured from your actual room noise, and Chrome's noise suppression — which erases whispers — is off.
• Apps launch by their real name: "MSI Afterburner" resolves through Start Menu shortcuts, and the launch wait went from 5s to 30s (measured: ~9s for Afterburner).
• A model that falls into a repetition loop is cut off instead of emitting the same sentence 150 times.

Gnosis 1.2.0

Fixes for a fresh install, voice, and desktop control.

Install

irm https://raw.githubusercontent.com/DOMCHURCH/Gnosis/master/scripts/install.ps1 | iex

Or download Gnosis-Setup-1.2.0.exe below.

A fresh install now works

• ~/Gnosis and the ~/.dom folders are created on first launch. They were previously made only as a side effect, so many installs never got them at all.
• computer-use ships in the default MCP registry. Voice's "click for me" had no tool behind it before.
• MCP servers all launch through npx, which comes with Node.js — and the app doesn't bundle it. A machine without Node used to fail with a bare spawn npx ENOENT on every server. It now says what to install and where.
• Settings → Voice → Install voice support installs openWakeWord and Kokoro and downloads the model weights, with progress. No more pip commands.

Required: an OpenRouter key. Node.js (for MCP) and Python (for voice) are optional, and Gnosis names whichever is missing.

Opening and controlling apps

"Open MSI Afterburner" failed four different ways, all now fixed:

• App names are resolved before launching — a real path, then PATH, then Start Menu shortcuts, so display names like "MSI Afterburner" work. An unresolvable name is refused instead of making Windows show you an "open with" chooser.
• Window matching ignores spacing and punctuation, so "MSI Afterburner" finds MSIAfterburner.
• The launch wait went from 5s to 30s. Measured: Afterburner ~9s, Notepad ~11s cold.
• Failures say what actually happened — including which windows opened instead, that dialogs are invisible to the tool, and when a window can't be raised because it's running as administrator.
• A wrong key name (win instead of super) retries with the right one rather than derailing the turn.

Voice

• The overlay is real frosted glass, not a grey blob. Blur was 38px, past the point where any backdrop averages to grey.
• The overlay buttons work. A stacking context was swallowing every click.
• There's a real ×, and it turns voice off properly — the wake word used to keep listening behind a dismissed panel.
• Layout holds at any window size and display scale.
• Text clears WCAG AA against a white desktop (7.13 / 5.81 / 4.78:1).

Agent safety

• A model that falls into a repetition loop is now cut off. One session emitted the same sentence ~150 times in a single message with nothing to stop it.
• Ordinary MCP and computer-use actions can be approved once with "always" instead of prompting per mouse move. Genuinely dangerous operations still prompt every time, and ~/.dom stays hard-blocked no matter what is approved.

Interface

• TERMINAL works from every view; it used to be a dead toggle outside the Floor tab.
• The mobile UI gets the current design — it was silently opted out of the whole redesign.

Gnosis v1.1.1

Desktop app with voice mode, auto-updater, notifications, drag and drop, keyboard shortcuts, deep links, and full computer control. MIT licensed.