Skip to content

Heliox OS v0.12.0

Choose a tag to compare

@github-actions github-actions released this 16 Aug 01:24

Heliox OS v0.12.0 — Governed Intelligence and Handoff

v0.12.0 turns the post-0.11 source milestones into a public, cross-platform release. It adds official-CLI access to existing AI subscriptions, local MCP task staging, secure Air Handoff, completed integration paths, and a single production cognitive runtime while preserving Heliox's deterministic approval and execution boundary.

Highlights

  • Existing AI subscriptions — Use an existing Codex or Claude Code login through the provider's official CLI. Heliox does not copy provider OAuth files, supports provider-owned model selection, bounds prompt/context usage, and reports subscription-plan usage separately from metered API spend.
  • Local Heliox MCP — Connect compatible IDEs to heliox-mcp; requests are staged locally and still pass through daemon identity, permission, approval, execution, and verification gates. The public documentation MCP remains read-only and cannot control a computer.
  • Secure Air Handoff — Share a deliberately selected Heliox view with a paired mobile browser over an ephemeral encrypted session. Pairing, start, stop, expiry, and gesture controls are explicit; this is not an unrestricted desktop broadcast.
  • Email, calendar, and SSH integrations — Settings, credential-vault storage, RPC methods, specialist routing, policy enforcement, and truthful terminal results now form one tested path.
  • One production cognitive runtime — Narration, learned-risk interruption, suggestions, and autonomous execution share the live gateway rather than duplicate runtime state.
  • Stronger evidence and recovery — Local health reviews, neural staged-goal dispatch, provider timeouts, Windows microphone capture, MCP version reporting, and forensic results have additional fail-closed and regression coverage.

Reproducible evidence snapshot

  • The generated capability catalog declares 157 action types across 21 executable specialists with complete provider coverage. Independent post-condition verification remains available for a smaller subset; inspect capabilities.json rather than treating coverage as universal execution proof.
  • The 2026-08-16 local deterministic suite measures guarded CPU, memory, disk, system-information, intent-dispatch, event-loop, and learned-risk paths without model-provider calls.
  • A developer-machine Codex CLI planning run passed 3/3 fixed cases with 14.708 s median provider latency and zero executed or destructive actions. It is planning evidence, not an action-execution or universal provider benchmark; Claude Code was not installed for that capture.
  • CI remains the authority for Python, Svelte, visual-regression, Rust, marketplace, packaging, and release results for the tagged commit.

See proof.md, capabilities.json, and the raw software and subscription-planning evidence.

Safety and privacy boundaries

  • Provider subscriptions are optional and remain governed by the provider's availability, plan limits, model access, and terms. Heliox cannot turn a subscription into unlimited API usage.
  • Local MCP is local authority, not a remote-control endpoint. The Heliox app and daemon must be running, and approvals remain visible in Heliox.
  • Air Handoff exposes only its paired receiver experience. It requires an explicit session and does not grant the phone general Heliox or operating-system authority.
  • Neural intent remains an accessibility and research interface. Synthetic/recorded evidence does not establish live brain control, medical use, or unrestricted thought decoding.
  • Camera, gaze, gesture, microphone, TTS, first-run, and hardware-dependent accuracy still require validation on the user's actual devices.
  • SignPath test-policy signing is validated. Production signing remains dependent on the production certificate and release configuration; do not infer production signer identity from the test workflow.

Upgrade guidance

Download the installer matching the operating system from the v0.12.0 release. Back up settings, allow first-run Chromium and daemon setup to complete, and re-check provider CLI login, integration credentials, microphone, camera, browser, local TTS, Air Handoff pairing, and optional model configuration after installation.

Full comparison: v0.11.1...v0.12.0