Skip to content

Sonderr v1.5.17 — Safer tools, sharper teams

Choose a tag to compare

View all tags
@dxn111 dxn111 released this 27 Sep 17:57
· 11 commits to main since this release
v1.5.17
4f42239

Sonderr-v1 — the start of the SLM generation

Sonderr v1.5.17

More capable teams. Clearer boundaries. Safer work.

Sonderr is a localhost AI workspace built for engineering. This release brings the agent room into the conversation, makes the tools and mode boundaries clearer to every model, and adds another layer of checks around actions that can change data or run code.

▶ Watch the Sonderr-v1 launch film · Browse the source · Read the full changelog

A team, right inside the chat

Launch a research team without leaving the current conversation. The commander can coordinate up to three focused, read-only workers, compare their evidence, collect help requests and risk flags, and run a lead-authored poll. Open the live Agents room with Alt+5 to follow assignments, discussion, profiles, and votes. Worker votes stay separate from your vote; workers cannot edit files, run commands, call integrations, or take actions for you.

The model knows what it can actually do

Task mode and Tools & Access now have distinct meanings throughout tool selection, model guidance, and server-side checks:

  • Ask answers, inspects supplied read-only sources, and researches the public web. It does not edit files or run project scripts.
  • Plan creates a read-only implementation plan.
  • Build handles requested workspace changes. Full PC access is also required for shell commands and project checks.
  • Vision handles image understanding and, when enabled, image generation or edits.

The model uses the schemas supplied for the current request, explains the specific missing mode or access setting, and does not claim it can switch the selector for you. A denied action cannot be retried through another tool or shell route.

Security and reliability

This release tightens several boundaries across the app:

  • Server-side mode and access checks back up schema filtering for workspace writes, scripts, MCP, wallet operations, Studio updates, email drafts, images, and task-private state.
  • Actions that change data or execute commands require affirmative intent in the current message. Negated instructions and how-to questions do not authorize a file edit, email draft, saved-lead update, image edit, or command.
  • Project verification routes to the bounded project-check runner; general shell access is exposed only for a direct command request with Full PC access.
  • Workspace writes and reads reject symlinks into protected paths. Public web and MCP requests pin validated DNS answers and block unsafe destinations; local config and memory writes use safer file handling.
  • Session/view guards reduce cross-chat UI races, and provider responses are constrained to the active tool schemas with structured arguments.

These safeguards reduce specific attack and failure paths; they are not a claim that any model or security boundary is infallible. See SECURITY.md for reporting guidance.

Sonderr-v1 stays small by design

Sonderr-v1 is our first model: a 0.6B-parameter SLM specialized for the Sonderr environment. The model remains small; tools, web research, and the workspace supply task-specific reach. We intend to keep Sonderr’s model line SLM-scale and improve it over time.

The verified Q4_0 model and compatible Linux CPU runtime remain available from v1.5.16’s model assets; this release does not replace or retrain the weights. The installer continues to verify those pinned assets before installing them locally.

Get the release

Install or update with the Sonderr installer. The managed app checks the latest stable release and, when required, installs the exact release tag before reopening the workspace. Source checkouts remain development checkouts.

Verification

  • npm ci
  • npm run check
  • npm test
  • npm audit --omit=dev
  • npm pack --dry-run
Assets 4
Loading